anthonymsantee1@outlook.com emilyprincess215@gmail.com

[Big Al]

From a Survivor:

The scammer’s name is Anthony Medrano Santee.
Phone number: +19519921717

He communicates via Viber.

anthonymsantee1@outlook.com <mailto:anthonymsantee1@outlook.com>

My Oath to You - The Love of My Life

In the name of father and the of the son and of the holy spirit (Amen). I Anthony
Medrano Santee pledge in the name of the Lord to start this Oath with honesty.. O'
Lord, give me the wisdom, knowledge and understanding Anthony Medrano Santee want to
be the true love to you, for better, for worse, for worse, for good, till death do
us apart. I Anthony Medrano Santee promise the Lord that you be forever
loving, and I will never look for any woman to love until my grave.. I commit my
life, my words to you today , I Anthony Medrano Santee made this Oath as
a promise that I
will always be there for you , Morally, physically, spiritually,
mentally, and financially and if I Anthony Medrano Santee over a lie, O' Lord lets
sorrow be mine and let all I lay my hand on go vanity, let the curse of the lord
come unto me, but If I am Truthful, honest and loyal to you then let
Joy full my life and all my endeavors should be granted successfully because this
OATH stand to commit myself totally to you {Amen}.

E-mail from the Daughter:

emilyprincess215@gmail.com <mailto:emilyprincess215@gmail.com>

Do you really love my dad ? Are you going to marry him ?

Photos Used:

Skype ID:
Anthony Santee
live:4b4873b78bde77a6

Phone:
+19519921717
Number billable as mobile number
Country or destination United States
City or exchange location Moreno, CA
Original network provider* Sprint Spectrum L.p.

[Big Al]

customercare@skycargoexpress.com
Dear ,
We are sending you this email to you to notify you that your goods has been
shipped with registration number SCE01/EXP1/GPO/XXXXX,
You can track your goods with the details below.

Tracking Link: http:/ /skycargoexpress.com/secure-trackingB
<http:/ /skycargoexpress.com/secure-trackingB>
Tracking Code: R**********M

Dear ,
This message is to notify you that your goods has arrived in my our regional office
in Chicago on 26/05/2017 - 06:11 AM , with registration number SCE1/EXP1/GP0/XXXXX.
You are to pay for local delivery to our Head Office due to the new law. The local
delivery fee for your package is $2,000.00 so your goods can be delivered to your
doorstep within the next 24 hours, hope to hear from you, thank you.

All payments are being made to our head office in Chicago via Bank deposit or
Moneygram/Western Union Money transfer

CHOOSE YOUR PAYMENT METHOD BELOW;

1.) The bank deposit amount is $2,000.00 (7 days delivery) If you choose this
option, let us know so we can provide financial account details for you.


2.) Moneygram/ Western Union Money Transfer is $1,000.00 each (1 day delivery )

Names: Hannah Olunloyo
Address: Chicago, USA

NOTE: After payment, send a scanned copy of the payment slip, thank you.

E-mail Header:

Return-path:<customercare@skycargo-express.com>Received:from
pv33p00im-smtpin040.me.com ([17.142.180.66]) by ms09531.mac.com (Oracle
Communications Messaging Server 7.0.5.38.0 64bit (built Aug 1 2016)) with ESMTP id
<0OQV00M5JSL37V30@ms09531.mac.com> for ; Thu, 01 Jun 2017
18:27:03 +0000 (GMT)Original-recipient:rfc822; Received:from
sixteen.qservers.net (sixteen.qservers.net [162.220.59.118]) by
pv33p00im-smtpin040.me.com (Oracle Communications Messaging Server 7.0.5.38.0 64bit
(built Feb 26 2016)) with ESMTPS id <0OQV00EUWSL1GM40@pv33p00im-smtpin040.me.com>
for (ORCPT ); Thu, 01 Jun 2017
+0000 (GMT)Authentication-results:pv33p00im-dmarcmilter007.me.com; dmarc=none
header.from=skycargo-express.comAuthentication-results:pv33p00im-spfmilter009.me.com;
spf=pass (pv33p00im-spfmilter009.me.com: domain of customercare@skycargo-express.com
designates 162.220.59.118 as permitted sender)
smtp.mailfrom=customercare@skycargo-express.com;Received-SPF:pass
(pv33p00im-spfmilter009.me.com: domain of customercare@skycargo-express.com
designates 162.220.59.118 as permitted sender)
receiver=pv33p00im-spfmilter009.me.com; client-ip=162.220.59.118;
helo=sixteen.qservers.net;
envelope-from=customercare@skycargo-express.com;Authentication-results:pv33p00im-dkimmilter001.me.com;
dkim=pass (2048-bit key) header.d=skycargo-express.com
header.i=@skycargo-express.com header.b=Oy+ENRi+; dkim-adsp=passDKIM-Signature:v=1;
a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=skycargo-express.com; s=default;
h=Message-ID:References:In-Reply-To:
Subject:To:From:Date:Content-Transfer-Encoding:Content-Type:MIME-Version:
Sender:Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:
Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:
List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=FMFWSmt1gOveKn/5xVjE4D8g0gGqn+C6u1GjS/L9HWE=; b=Oy+ENRi+3A2M0c0mhVEvOEXBlp
8fySaimXwqKCWTM+W8icuBiiu1IjFvDBBTt7gi7tLJGse27K0GXIUp+XNCahHv/D8jF1u3mB9NEFh
qRmpYGCrV/QguxWgnthvfmc/MUN+iql2qOm2t2D3/kJxPhMCS8hjCfwFXHDY8kbug+qqsGtKR0BUw
d8OoyMfRwcrea6nWkKw+Znhna2Nr1Ld2v3myB1oY5mZ3kIr31QOaJDzokfDeQyutPHLQiacuAVk0O
1ZEVrdC15hB4vFk38H3aq4iDcnIzn/wmM6x0aWYD7n4l9WaofNf0XtcKMjHJUAo2dqO9btWLUBNnR
7NUilVTw==;Received:from [127.0.0.1] (port=38296 helo=sixteen.qservers.net) by
sixteen.qservers.net with esmtpa (Exim 4.89) (envelope-from
<customercare@skycargo-express.com>) id 1dGUoG-003iS4-FW for ;
Thu, 01 Jun 2017 19:27:00 +0100Received:from sixteen.qservers.net ([127.0.0.1]
helo=sixteen.qservers.net) by sixteen.qservers.net with ESMTP (ASSP 1.9.9); 1 Jun
2017 19:26:45 +0100MIME-version:1.0Content-type:text/plain; charset=US-ASCII;
format=flowedContent-transfer-encoding:7bitDate:Thu, 01 Jun 2017
+0100From:SkyCargoExpress <customercare@skycargo-express.com>To:
< >Subject:Shipment Arrival
NotificationIn-reply-to:<3ac3ad39-9f64-4fa7-bbeb-8969a9c89fa4@me.com>References:<3ac3ad39-9f64-4fa7-bbeb-8969a9c89fa4@me.com>Message-id:<a690f1da82c670b404c5a0c958222986@skycargo-express.com>X-Sender:customercare@skycargo-express.comUser-Agent:Roundcube
Webmail/1.2.4x-icloud-spam-score:3311331
f=skycargo-express.com;e=skycargo-express.com;is=yes;ir=no;spf=pass;dkim=pass;dmarc=absent/(noPolicy);gdwl=absent;pps=ham;clxs=ham;clxw=neutralX-Proofpoint-Spam-Details:rule=notspam
policy=default score=1 spamscore=1 clxscore=63 suspectscore=0 malwarescore=0
phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx
scancount=1 engine=8.0.1-1701120000
definitions=main-1706010344X-Proofpoint-Virus-Version:vendor=fsecure
engine=2.50.10432:,, definitions=2017-06-01_04:,,
signatures=0X-CLX-Spam:falseX-CLX-UnSpecialScore:63X-CLX-Score:63X-CLX-Shades:NoneX-MANTSH:1TEIXWlwZHFoaGkNHB0tNT0ReQ0QeHxseEQpMQxcbHQQbHhgEGxMfBBkYEBseGh8
aEQpMWRccGREKWU0XZEVETxEKWUkXHRpxGwYbGRN3BgcbBhoGGgYbHwYZGnEbEBp3BhoGBx8aB
hoGGgYaBhpxGhAadwYaEQpZXhdjY3kRCkNOF2d+UkN/YUlPRVxSWnJnZHBCfGFPc0JMekFNb0R
IQ2tyEQpYXBcZBBoEGRsHTRIdGBIZHRkFGx0EGx4YBBsTEgQZEhAbHhofGhEKXlkXe3BNb3kRC
k1cFxkaEQpMWhdsW2tvaxEKTEYXbGtrEQpDWhcbHBgEGBgaBB8TBBsbEhEKQl4XGxEKQkUXZ0V
PYEscEwV7Xx4RCkJOF2FFbnxTeBtSbmMFEQpCTBd6QHJGTR9gGHJtaBEKQmwXbEMTR19GbWJTT
nsRCkJAF29ZREZPUBxoQ31GEQpCWBdkRFMeZ21zbxkcWhEKTV4XGxEKcGgXaUt4cHNlX2RmeH8
QGRoRCnBoF2IeGUNybkVoXHJ/EBkaEQpwaBdme2tkc01lZm4TGRAZGhEKcGgXZ3xrb3Npb1JiB
UEQGRoRCnBoF2FlUhNAf3NpWXtcEBkaEQpwfxdkHkd4ax1bYmVLGBAZGhEKcF8Xaxt+ZWJtYWB
jHnMQGRoRCnB9F2hPeWhdaEVGfHtbEBkaEQpwbBdvaB0aZRhoY2xcYBAZGhEKcEwXekl7HUJJU
0R5aE8QGRoRCm1+FxsRClhNF0sRx-dmarc-info:pass=none; dmarc-policy=(nopolicy); s=u0;
d=u0x-dmarc-policy:noneX-AntiAbuse:This header was added to track abuse, please
include it with any abuse reportX-AntiAbuse:Primary Hostname -
sixteen.qservers.netX-AntiAbuse:Original Domain -
icloud.comX-AntiAbuse:Originator/Caller UID/GID - [47 12] / [47
12]X-AntiAbuse:Sender Address Domain -
skycargo-express.comX-Get-Message-Sender-Via:sixteen.qservers.net: authenticated_id:
customercare@skycargo-express.comX-Authenticated-Sender:sixteen.qservers.net:
customercare@skycargo-express.com

20170613023337-c9edbef6-th.jpg (8.44 KiB) Viewed 5766 times

20170613023417-4a5867f2-th.jpg (8.36 KiB) Viewed 5766 times

[Big Al]

Dear ,
Please make your payment to the new agent in charge.

Name: Barnabas Jime

Address: Chicago, Illinois

Note: After payment send us a scan copy of your payment receipt.

Dear ,
Your payment receipt is under review. Your goods with
registration SCE1/EXP1/GPO/XXXXX will arrive at its final destination
on 01/06/2017 - 11:30AM. Please be home to receive and claim your goods
with your ID card, thank you.

Track your goods with the details
below;

Tracking link:
http:/ /www.skycargo-express.com/secure-trackingB
<http:/ /www.skycargo-express.com/secure-trackingB>

Tacking code: R******M

[Big Al]

Dear ,
This Message is to notify you that your goods with registration
number SCEO1/EXP1/GP0/XXXXX is in Indianapolis Custom Office. I wish to
bring to your notice that your goods has been placed on hold by the
Indianapolis customs Authorities for some reasons which is violating the
shipping policies. We will let you know any development concerning your
goods, Please bear with us, thank you.

Track your goods with the details
below;

Tracking link:
http:/ /www.skycargo-express.com/secure-trackingB/
<http:/ /www.skycargo-express.com/secure-trackingB/>

Tacking code: R******M

Dear ,
Your package with registration number SCEO1/EXP1/GP0/XXXXX has been
seized by the Indianapolis custom because it has violated the bylaws of
Custom & Excise Duty Act Section 11 of 1980 and Section 5 Sub 5 & 9 of
1995 that directs the US Custom Service to impound, verify, scrutinized
and clear any goods entering the country either from any of her Borders,
Airport, Seaport or any point of entry. This type of offence is up to 21
years in prison without trial. We are doing our best to help retrieve
your goods. The custom advice you have to purchase TAX AND INLAND
CLEARANCE CERTIFICATE (TAICC) and NON INSPECTION CERTIFICATE (NIC) from
the Indianapolis custom Head Office. You have to obtain these
certificates immediately so we can attach it to your package, which will
enable us do your goods clearance and deliver it to its final
destination.


TAX AND INLAND CLEARANCE CERTIFICATE (TAICC) is $27,500. 00

NON INSPECTION CERTIFICATE (NIC) is $44,000.00

Track your goods with the details below;

Tracking link: http:/ /www.skycargo-expzress.com/secure-trackingB
<http:/ /www.skycargo-expzress.com/secure-trackingB>

Tacking code: R*******M

[firefly]

skycargoexpress.com is no more active. According to the fake site details - https://db.aa419.org/fakebanksview.php?key=124389, the registrant was in Benin City, Nigeria.

skycargo-express.com is still active (but not for long)...

From the fake site:

SKY CARGO EXPRESS Delivery Service is a family owned and operated rush delivery service, which was established in 1995. We operate 24 hours a day, 7 days a week. Pre-scheduling for night & weekend deliveries is preffered.

...we operate the largest mail and parcel distribution network in the Benelux (Belgium, Netherlands, Luxembourg) region.

Email:customercare@skycargo-express.com
Tel: +18589993492
Email: skycargoexpress@fastservice.com

"established in 1995" is a lie - the site is active since 2017-05-29.

"the largest mail and parcel distribution network in the Benelux region" is another lie - the registrant is in the same Benin City, Nigeria.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=124390

This is what the fake site is looking like:

[firefly]

The same group of scammers are operating another fake site pretending to be Advanced Bank of Asia Ltd.

The fake bank is used in romance scam - the fake character is asking the victim to open the fake site and get the confirmation of the money in his bank account, as part of the scam.

From the fake site:

ABA Bank is Cambodia's leading private financial institution (not state-owned enterprise) founded in 1996 as the Advanced Bank of Asia Limited.

Email: aba.bank@tech-center.com

"founded in 1996" is a lie - was created 2017-02-01.

Cambodia is again in Nigeria...

For the fake site details: https://db.aa419.org/fakebanksview.php?key=124392

This is what the fake site is looking like:

[firefly]

Last, but not least, the same scam group us also using a domain created only for the email address, impersonating the US Army.

The email address is also used only in romance scams - the victim is asked to contact and email address ending in @usamilarmy.com for getting their "love" travel allowance for spending a holiday together.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=124396