Information on romance scams and scammers.
#262497 by Tim Atem Mon Aug 03, 2015 8:45 am
Delivered-To: <snipped>
Received: by 10.107.143.18 with SMTP id r18csp1908401iod;
Mon, 3 Aug 2015 03:58:40 -0700 (PDT)
X-Received: by 10.182.246.136 with SMTP id xw8mr16443993obc.29.1438599520324;
Mon, 03 Aug 2015 03:58:40 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-oi0-x244.google.com (mail-oi0-x244.google.com. [2607:f8b0:4003:c06::244])
by mx.google.com with ESMTPS id w72si11218982oie.8.2015.08.03.03.58.40
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 03 Aug 2015 03:58:40 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4003:c06::244 as permitted sender) client-ip=2607:f8b0:4003:c06::244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4003:c06::244 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-oi0-x244.google.com with SMTP id t4so3347521oik.3
for <<snipped>>; Mon, 03 Aug 2015 03:58:40 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.202.102.82 with SMTP id a79mr15346619oic.62.1438599519996;
Mon, 03 Aug 2015 03:58:39 -0700 (PDT)
Received: by 10.202.14.11 with HTTP; Mon, 3 Aug 2015 03:58:39 -0700 (PDT)
Reply-To: [email protected]
Date: Mon, 3 Aug 2015 10:58:39 +0000
Message-ID: <CA+7jtbdXAqoUbB4fpht_PoZY2Og38+bMTtSD0uV+hibcpvw8Zg@mail.gmail.com>
Subject: Sweetie
From: Naomi Douglas <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc: <snipped>


Hello Sweetie,

My name is Naomi Douglas, From United States of America. I am a NASA
Astronaut officer working at US military Base camp (Engineer Brigade)
in Libya, I pick interest on you. I will like to establish mutual
friendship with you. I will introduce myself better with details of my
proposal and send you my picture as soon as i receive your mail.

Thanks from lovely one.


Naomi Douglas.

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
Advertisement

#262660 by Tim Atem Tue Aug 04, 2015 3:07 pm
Gone is the romance and here is the 419 scam:

Delivered-To: <snipped>
Received: by 10.202.199.83 with SMTP id x80csp232599oif;
Tue, 4 Aug 2015 03:16:42 -0700 (PDT)
X-Received: by 10.152.23.38 with SMTP id j6mr2396379laf.47.1438683402447;
Tue, 04 Aug 2015 03:16:42 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-lb0-x242.google.com (mail-lb0-x242.google.com. [2a00:1450:4010:c04::242])
by mx.google.com with ESMTPS id ku9si316842lac.141.2015.08.04.03.16.41
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 04 Aug 2015 03:16:42 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:4010:c04::242 as permitted sender) client-ip=2a00:1450:4010:c04::242;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:4010:c04::242 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-lb0-x242.google.com with SMTP id nr7so208567lbb.0
for <<snipped>>; Tue, 04 Aug 2015 03:16:41 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.152.10.97 with SMTP id h1mr2479471lab.45.1438683401438; Tue,
04 Aug 2015 03:16:41 -0700 (PDT)
Received: by 10.112.12.100 with HTTP; Tue, 4 Aug 2015 03:16:41 -0700 (PDT)
In-Reply-To: <snipped>
References: <snipped>
Date: Tue, 4 Aug 2015 10:16:41 +0000
Message-ID: <CAMtE7nVuXA6HX=xBeVUdDTNHn93fAz+d+LHKAu0AwxGxJ7MgHA@mail.gmail.com>
Subject: Re: Sweetie
From: Naomi Douglas <[email protected]>
To: <<snipped>>


Hi Dear,

Thanks for your kind response and as a matter of fact, i am very happy
to read your mail, however, i really want to establish a true
relationship that may lead into a business partner or something else.

It is my pleasure meeting you, I hope all is well with you and how are
you enjoying your day? as i told you earlier in my previous letter my
name is Naomi Douglas, I am US military officer currently in Libya
now, and i will like to get acquainted with you, I am loving, honest
and caring person with a good sense of humor, I enjoy meeting new
people and knowing their way of life, I enjoy watching the sea waves
and the beauty of the mountains and everything that nature has to
offer.

My dear, i want you to know that we are being attacked by insurgents
everyday and car bombs and during one of our rescue mission we came
across a safe box that contain huge amount of money that belongs to
the supporters of the over thrown government of Libya, which I believe
was money meant for buying weapons and ammunition, and it was agreed
by all Army officers present on that rescue mission that the money
will be shared among us and which we did.

Out of the total fund my share was $4,560,000 ( Four Million Five
Hundred and Sixty Thousand united states Dollars) I am seeking your
assistance to evacuate my share of the money out of this country
(Libya) to your own country for you to keep it safe on my behalf till
i come over to your country,

So i want you to assure me that if this money is been delivered to you
in your country that you are going to be trustworthy to keep the money
till when i will come to your country to meet you face to face to
collect the money back from you. I it clear to me that you might be
scared of this proposal, but i want to let you know that i have made
solid arrangements with a company ''Velocity delivery and security
services''and they have promised to deliver the fund through
diplomatic method to any of my choosing destination.

This delivery is going to be handle legally by the''Velocity delivery
and security services''and there will not be any form of risk involve
in the process and the money will be pack safely in a truck case and
the same case will be deliver to you in your country. I have decide to
compensate you with 15% of the total money once after the money is
delivered to you, while the rest balance shall be my investment
capital in your country.

One passionate appeal I will make to you is not to discuss this matter
to a third party, if you do not want to be party to this business
please delete, this letter from your email box to avoid any leakage of
this information and it will be dangerous to me based on my position
here.

I have chosen to contact you after my prayers and I believe that you
will not betray my trust nor thwart my dream, though you may wonder
why I am so soon revealing myself to you without formal introduction,
well, I will say that my mind convinced me that you are the true
person to help me in receiving and investing this Fund. Note; I do not
know how long we going to remain here and my fate since I have
survived two bomb attack here, which prompted me to search out for a
reliable and trust worthy person to help me receive and invest the
Fund, because I will be coming over to your home country to invest and
start a new life not as a soldier anymore. I hope my explanation is
very clear but if you need further clarification just let me know and
i will explain further I want to let you know that here in the
military zone we are not allow to make use of mobile phone, we only
make use of radio message and email communication so please let us
continue communicating through email for the mean time. Conclusively,
i wish you could send me a reply immediately in regards to this
proposal, your urgent reply will be highly appreciated.

I Wait to receive your acceptable reply as soon as you read this letter.

Love from.



Naomi Douglas

Image

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
#263346 by Tim Atem Tue Aug 11, 2015 10:24 am
Naomi's "courier". The website velocitydeliveryservices.net is in the process of being reported for fraud.

Velocity Delivery and Security Services
Phone: +228-225 75840
Fax: +228-225 76840
Emails:
[email protected]
[email protected]
[email protected]
http://www.velocitydeliveryservices.net


Delivered-To: <snipped>
Received: by 10.202.199.83 with SMTP id x80csp2129316oif;
Mon, 10 Aug 2015 02:47:04 -0700 (PDT)
X-Received: by 10.152.205.43 with SMTP id ld11mr8518308lac.61.1439200024564;
Mon, 10 Aug 2015 02:47:04 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-la0-x241.google.com (mail-la0-x241.google.com. [2a00:1450:4010:c03::241])
by mx.google.com with ESMTPS id be2si13709862lab.80.2015.08.10.02.47.03
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 10 Aug 2015 02:47:04 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:4010:c03::241 as permitted sender) client-ip=2a00:1450:4010:c03::241;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:4010:c03::241 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-la0-x241.google.com with SMTP id ia3so4590029lab.2
for <<snipped>>; Mon, 10 Aug 2015 02:47:03 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.153.8.137 with SMTP id dk9mr19575378lad.57.1439200023192;
Mon, 10 Aug 2015 02:47:03 -0700 (PDT)
Received: by 10.112.12.100 with HTTP; Mon, 10 Aug 2015 02:47:03 -0700 (PDT)
Date: Mon, 10 Aug 2015 09:47:03 +0000
Message-ID: <CAMtE7nUQQFzuWHjE7zqJnXLJmuUmGQnvLOO1T2r_coz4PrEOZA@mail.gmail.com>
Subject: Below is their contact details
From: Naomi Douglas <[email protected]>
To: <<snipped>>


My dearest one,

My dearest, I have submitted your sent details to the delivery company
and i believe as they promised they will get to you as soon as
possible to let you know about their further arrangements and the
delivery date.

Like I told you earlier, they will tag the box as diplomatic package
containing diplomatic materials and it will be deliver to you by any
of their assigned delivery officer or agent to your country as I have
already handed over the box to them through their accredited agent
here in Libya, but they said that all packages departing from Africa
must go through their African regional head office in Lome Togo before
departing to any where of the world.

I really want us to conclude this business as soon as possible so that
you can receive the package within 2 or 3 days after departure, so I
want you to officially contact the security company through their
contact information now for proper identification.

Below is their contact details;


Company name: Velocity delivery and security services Office /
address: 322,avenue Nicolas Grunistzky Avepozo Lome, Togo. Maritime
Phone: +228 225 75840
Fax: +228 225 76840
Email: [email protected],
[email protected],
[email protected]
http://www.velocitydeliveryservices.net
Operation manager: MR. JERRY MORGAN

Though i have already forwarded your personal data to the company but
I will advice you to contact them as well either through email or
phone call, the secret code number of the box consignment is FS645X
please take note because the deliver officer will ask for the security
code number of the package to confirmed you as the rightful person.
Like I said before I have decide to compensate you with 15% of the
total money once you received the money, while the rest balance shall
be for my investment capital in your country.

Thanks in advance for your understanding and cooperation,I hope to
have smile with you soon as I am counting on your honesty, i might not
be free to follow the activities of the security company, so I want
you to stand on my behalf till the cash box is delivered to you


Have a nice and better day ahead


Hug from,
Naomi Douglas

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
#263965 by Tim Atem Sun Aug 16, 2015 2:42 pm
Naomi's courier has a new domain, velocitydelivery-service.com - in the process of being reported.

Delivered-To: <snipped>
Received: by 10.202.199.83 with SMTP id x80csp143068oif;
Fri, 14 Aug 2015 23:12:22 -0700 (PDT)
X-Received: by 10.50.134.226 with SMTP id pn2mr7081791igb.21.1439619142866;
Fri, 14 Aug 2015 23:12:22 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-io0-x243.google.com (mail-io0-x243.google.com. [2607:f8b0:4001:c06::243])
by mx.google.com with ESMTPS id a92si5538916ioj.192.2015.08.14.23.12.22
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 14 Aug 2015 23:12:22 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c06::243 as permitted sender) client-ip=2607:f8b0:4001:c06::243;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4001:c06::243 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-io0-x243.google.com with SMTP id e124so5552702iof.1
for <<snipped>>; Fri, 14 Aug 2015 23:12:22 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.107.31.134 with SMTP id f128mr44325851iof.19.1439619142433;
Fri, 14 Aug 2015 23:12:22 -0700 (PDT)
Received: by 10.79.75.68 with HTTP; Fri, 14 Aug 2015 23:12:22 -0700 (PDT)
Date: Sat, 15 Aug 2015 06:12:22 +0000
Message-ID: <CALLmSjwdCi2P3-U6kwCfGi0Ycv58Q-CqBREkSstjzfY8wt+BfQ@mail.gmail.com>
Subject: Attention
From: Velocity Delivery <[email protected]>
To: <<snipped>>


We will register your full contact details to our database and send your tracking pin number to you immediately after we acknowledge the confirmation of your contact details.

We promise to give our customers the best of our services.Should you have any question(s)please contact us on our telephone number (+228 225 75840)
for more directives/clarifications. please always reply to this email id :[email protected]
[email protected]


Thanks for your understanding and co-operation.

We are waiting for your responds.

Operation manager . MR. Jerry Morgan
Velocity Delivery and Security Service
Telephone: +228 225 75840
Email: [email protected]
[email protected]
Website: http://www.velocitydelivery-service.com

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
#273432 by flinsy Mon Nov 02, 2015 12:53 pm
Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Sat, 31 Oct 2015 17:16:06 -0400
Received: from mailgw1.Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Sat, 31 Oct 2015 17:16:06 -0400
Received: from mailgw1.minjust.gov.ua ([193.111.173.72]:44117)
by sv33.byethost33.org with esmtp (Exim 4.86)
(envelope-from <[email protected]>)
id 1ZsdVN-000pcy-K9
for [email protected]; Sat, 31 Oct 2015 17:16:06 -0400
Received: from postfix1.minjust.gov.ua (unknown [192.168.40.31])
by mailgw1.minjust.gov.ua (Postfix) with ESMTP id B00BA28192A;
Sat, 31 Oct 2015 23:16:03 +0200 (EET)
Received: from webmail.minjust.gov.ua (unknown [192.168.60.50])
(using TLSv1.1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by postfix1.minjust.gov.ua (Postfix) with ESMTPSA id 6CCFBC0DEF;
Sat, 31 Oct 2015 23:16:03 +0200 (EET)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 8bit
Date: Sat, 31 Oct 2015 23:16:03 +0200
From: Michelle Brown <[email protected]>
To: undisclosed-recipients:;
Subject: Hola
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.9.5
X-Spam-Status: No, score=1.8
X-Spam-Score: 18
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "sv33.byethost33.org",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: ¡Mi favorito! Hola, mi nombre es Michelle Brown, estoy American
General, espero que este mensaje te encuentre bien y saludable y espero que
podamos establecer una relación mientras nos reunimos aquí por primera
vez, yo era a través de un perfil que habla bien de ti en este sitio y me
impresionó cuando vi su perfil y decido para comunicarnos con usted. Es
mi deseo de conocer, me gusta la honestidad, la confianza, el amor, el cuidado,
la verdad y el respeto, tengo todas estas cualidades en mí, por favor, responda
a mí a través de mi casilla de correo electrónico privado y que conocemos
mejor. Espero leer de usted si su también están interesados. Gracias y
esperamos oír de usted pronto. NOMBRE: Michelle. [...]

Content analysis details: (1.8 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium
trust
[193.111.173.72 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(michellebrown2020[at]hotmail.com)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: NO

([193.111.173.72]:44117)
by sv33.byethost33.org with esmtp (Exim 4.86)
(envelope-from <[email protected]>)
id 1ZsdVN-000pcy-K9
for [email protected]; Sat, 31 Oct 2015 17:16:06 -0400
Received: from postfix1.minjust.gov.ua (unknown [192.168.40.31])
by mailgw1.minjust.gov.ua (Postfix) with ESMTP id B00BA28192A;
Sat, 31 Oct 2015 23:16:03 +0200 (EET)
Received: from webmail.minjust.gov.ua (unknown [192.168.60.50])
(using TLSv1.1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by postfix1.minjust.gov.ua (Postfix) with ESMTPSA id 6CCFBC0DEF;
Sat, 31 Oct 2015 23:16:03 +0200 (EET)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 8bit
Date: Sat, 31 Oct 2015 23:16:03 +0200
From: Michelle Brown <[email protected]>
To: undisclosed-recipients:;
Subject: Hola
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.9.5
X-Spam-Status: No, score=1.8
X-Spam-Score: 18
X-Spam-Bar: +
X-Ham-Report: Spam detection software, running on the system "sv33.byethost33.org",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: ¡Mi favorito! Hola, mi nombre es Michelle Brown, estoy American
General, espero que este mensaje te encuentre bien y saludable y espero que
podamos establecer una relación mientras nos reunimos aquí por primera
vez, yo era a través de un perfil que habla bien de ti en este sitio y me
impresionó cuando vi su perfil y decido para comunicarnos con usted. Es
mi deseo de conocer, me gusta la honestidad, la confianza, el amor, el cuidado,
la verdad y el respeto, tengo todas estas cualidades en mí, por favor, responda
a mí a través de mi casilla de correo electrónico privado y que conocemos
mejor. Espero leer de usted si su también están interesados. Gracias y
esperamos oír de usted pronto. NOMBRE: Michelle. [...]

Content analysis details: (1.8 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium
trust
[193.111.173.72 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(michellebrown2020[at]hotmail.com)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: NO

Who is online

Users browsing this forum: Bing [Bot] and 62 guests