NOTE: Make no mistake, this author is only sorry if you don't fork over your information as requested. Sorry if you block attempts to steal your finances, create bills for you, help themselves to your tax refund or any other number of sordid endings for you. Stay away from these copy and paste criminals, they only send lies and reap horror.
From: Felicia Larry <emailservers5@yahoo.com> To:00:31:22 CDT, Thursday 31 October 2019
Attachments: None
Message ID: <295282476.4288928.1572499876376@mail.yahoo.com>
Return Path: <emailservers5@yahoo.com>
Reply To: felicialarry@mail2one.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us4.ppe-hosted.com (unknown [10.110.49.109]) by pure.maildistiller.com with ESMTPS id 4277980061 for <>; Thu, 31 Oct 2019 05:31:22 +0000 (UTC)
from sonic303-19.consmr.mail.ir2.yahoo.com (sonic303-19.consmr.mail.ir2.yahoo.com [77.238.178.200]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id F1DA2B40069 for <>; Thu, 31 Oct 2019 05:31:21 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic303.consmr.mail.ir2.yahoo.com with HTTP; Thu, 31 Oct 2019 05:31:20 +0000
I apologize for intruding into your privacy; Since we have never met each other but pay attention and understand my reasons of contacting you, please don't be angry with me. I am happy to get in contact with you after being directed to find a nice, trust worthy and a reliable friend. I was motivated when I saw your email address when browsing. I am here to seek your advice of which I know that it will help me to overcome my situations here, I am presently a single girl. In your usual time, may it please you to e mail me back So that I will explain more about myself. A good friendship is the foundation build on other relative things to come. I wait patiently to hear from you. Please Write me on my email address ( felicialarry@mail2one.com ) Thanks and remain blessed
Envelope Sender: <emailservers5@yahoo.com>
'From' Header: Felicia Larry <emailservers5@yahoo.com>
Subject: I apologize for intruding into your privacy;
Timestamp: 00:31:22 CDT, Thursday 31 October 2019
Message-ID: <295282476.4288928.1572499876376@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Client IP Address: 77.238.178.200
Client GeoIP Lookup: Ireland
Email Size: 3.8 kB
Encrypted? No
Thursday, October 31, 2019
Attention
NOTE: This one's an aggressive little bugger for sure: Attention. We all know the Central Bank of Nigeria is in the US, right? Well, that's what this criminal is stating. Using a free gmail and attempting to impersonate a financial institution for criminal means is just wrong. Don't get tied up with these crooks, delete these emails and just forget about them.
From: IBRAHIM MUSA <ibrahimmusa20151@gmail.com> To: undisclosed-recipients:;06:03:32 CDT, Thursday 31 October 2019
Attachments: None
Message ID: <CA+kLP4isJUV0i1yxdz14TzUG4nk=+9E7X5DTJFJT739LiqjeBA@mail.gmail.com>
Return Path: <ibrahimmusa20151@gmail.com>
Reply To:
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.7.65.200]) by pure.maildistiller.com with ESMTPS id 2695B140064 for <>; Thu, 31 Oct 2019 11:03:32 +0000 (UTC)
from mail-wr1-f67.google.com (mail-wr1-f67.google.com [209.85.221.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id CAD1B80005A for <>; Thu, 31 Oct 2019 11:03:31 +0000 (UTC)
by mail-wr1-f67.google.com with SMTP id e11so5747918wrv.4 for <>; Thu, 31 Oct 2019 04:03:31 -0700 (PDT)
by 2002:a1c:cc0f:0:0:0:0:0 with HTTP; Thu, 31 Oct 2019 04:03:29 -0700 (PDT)
From: Ibrahim Musa Director Computer Telex Dept Central bank of Nigeria Attention, I am .Ibrahim Musa, Director Computer Telex Dept of central bank of Nigeria. I decided to contact you because of the prevailing security report reaching my office and the intense nature of polity in Nigeria. This is to inform you about the recent plan of federal government of Nigeria to send your fund to you via diplomatic immunity cash delivery payment. This system will be easier for you and for us. We are going to pay you US$10.Million part contract payment of your total sum via the above approved mode of payment. Every necessary arrangement has put in place for the secured of all required security documents to cover the money. The Money is coming on 2 security proof boxes, the boxes are sealed with Synthetic nylon seal and padded with machine. I will use my position as the foreign operation director of this apex bank to make sure this consignments (fund ) are been safely and legally release to You. The boxes are coming with assigned diplomatic agents who will accompany the Boxes to your approved destination ad dress. For a hitch free and safe 1. Your full house address 2. Your identity such as, international passport, driver's license or national identification card. 3. Your contact phone numbers, 4.Occupation The diplomatic Agents attached will travel with these required information's For the delivery of your fund. They will call you immediately they arrives Your country's airport. I hope you understand me. I will let you know when these consignments will be lifted. IMPORTANT NOTE: The diplomatic Agents does not know the original contents of the boxes. For security reasons what we declare d to them as the contents of the consignments are Sensitive photographic Film Material. I did not declare money to them please. So if they call you and ask you the contents please tell them the same thing ok. Contact me immediately and I will let you know how far I have gone with The arrangement. I will secure the clearance Certificate that will be tagged on the boxes which I will dispatch along with the security inner Keys of the consignments to enable you access these consignments has soon as it delivered to you. This clearance instruments will make it pas s every custom checkpoint all over the world Please I need your urgent reply because the boxes are schedule to airlift as soon as we hear from you. Contact me immediately you receive this message. Best Regards, From: Ibrahim Musa Director Computer Telex Dept Central bank of Nigeria
Envelope Sender: <ibrahimmusa20151@gmail.com>
'From' Header: IBRAHIM MUSA <ibrahimmusa20151@gmail.com>
Subject: Attention
Timestamp: 06:03:32 CDT, Thursday 31 October 2019
Message-ID: <CA+kLP4isJUV0i1yxdz14TzUG4nk=+9E7X5DTJFJT739LiqjeBA@mail.gmail.com>
Attachments: None
Client IP Address: 209.85.221.67
Client GeoIP Lookup: United States
Email Size: 5.3 kB
Encrypted? No
From: IBRAHIM MUSA <ibrahimmusa20151@gmail.com> To: undisclosed-recipients:;06:03:32 CDT, Thursday 31 October 2019
Attachments: None
Message ID: <CA+kLP4isJUV0i1yxdz14TzUG4nk=+9E7X5DTJFJT739LiqjeBA@mail.gmail.com>
Return Path: <ibrahimmusa20151@gmail.com>
Reply To:
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.7.65.200]) by pure.maildistiller.com with ESMTPS id 2695B140064 for <>; Thu, 31 Oct 2019 11:03:32 +0000 (UTC)
from mail-wr1-f67.google.com (mail-wr1-f67.google.com [209.85.221.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id CAD1B80005A for <>; Thu, 31 Oct 2019 11:03:31 +0000 (UTC)
by mail-wr1-f67.google.com with SMTP id e11so5747918wrv.4 for <>; Thu, 31 Oct 2019 04:03:31 -0700 (PDT)
by 2002:a1c:cc0f:0:0:0:0:0 with HTTP; Thu, 31 Oct 2019 04:03:29 -0700 (PDT)
From: Ibrahim Musa Director Computer Telex Dept Central bank of Nigeria Attention, I am .Ibrahim Musa, Director Computer Telex Dept of central bank of Nigeria. I decided to contact you because of the prevailing security report reaching my office and the intense nature of polity in Nigeria. This is to inform you about the recent plan of federal government of Nigeria to send your fund to you via diplomatic immunity cash delivery payment. This system will be easier for you and for us. We are going to pay you US$10.Million part contract payment of your total sum via the above approved mode of payment. Every necessary arrangement has put in place for the secured of all required security documents to cover the money. The Money is coming on 2 security proof boxes, the boxes are sealed with Synthetic nylon seal and padded with machine. I will use my position as the foreign operation director of this apex bank to make sure this consignments (fund ) are been safely and legally release to You. The boxes are coming with assigned diplomatic agents who will accompany the Boxes to your approved destination ad dress. For a hitch free and safe 1. Your full house address 2. Your identity such as, international passport, driver's license or national identification card. 3. Your contact phone numbers, 4.Occupation The diplomatic Agents attached will travel with these required information's For the delivery of your fund. They will call you immediately they arrives Your country's airport. I hope you understand me. I will let you know when these consignments will be lifted. IMPORTANT NOTE: The diplomatic Agents does not know the original contents of the boxes. For security reasons what we declare d to them as the contents of the consignments are Sensitive photographic Film Material. I did not declare money to them please. So if they call you and ask you the contents please tell them the same thing ok. Contact me immediately and I will let you know how far I have gone with The arrangement. I will secure the clearance Certificate that will be tagged on the boxes which I will dispatch along with the security inner Keys of the consignments to enable you access these consignments has soon as it delivered to you. This clearance instruments will make it pas s every custom checkpoint all over the world Please I need your urgent reply because the boxes are schedule to airlift as soon as we hear from you. Contact me immediately you receive this message. Best Regards, From: Ibrahim Musa Director Computer Telex Dept Central bank of Nigeria
Envelope Sender: <ibrahimmusa20151@gmail.com>
'From' Header: IBRAHIM MUSA <ibrahimmusa20151@gmail.com>
Subject: Attention
Timestamp: 06:03:32 CDT, Thursday 31 October 2019
Message-ID: <CA+kLP4isJUV0i1yxdz14TzUG4nk=+9E7X5DTJFJT739LiqjeBA@mail.gmail.com>
Attachments: None
Client IP Address: 209.85.221.67
Client GeoIP Lookup: United States
Email Size: 5.3 kB
Encrypted? No
Hello
NOTE: Ooooo this one had to send an infected attachment! Don't ever open attachments in emails from strange people on the internet. Much less from South Africa! Or Nigeria, or Russia, or anywhere.
From: Adrian Frost <telkomsa206975@telkomsa.net> To: undisclosed-recipients:;19:11:32 CDT, Thursday 31 October 2019
Attachments: Artemis Fund Investment Ltd.doc
Message ID: <981086327.366503433.1572545717341.JavaMail.root@telkomsa.net>
Return Path: <telkomsa206975@telkomsa.net>
Reply To: adrianfrost07@gmail.com
MIME Version: 1.0
Content Type: multipart/mixed; boundary="----=_Part_366503431_313510095.1572545717337"
Attachments:
Artemis Fund Investment Ltd.doc [Content-Type: application/msword]
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.66.42]) by pure.maildistiller.com with ESMTPS id 5300E2C0054 for <>; Fri, 1 Nov 2019 00:11:32 +0000 (UTC)
from smg.telkomsa.net (smg.telkomsa.net [105.187.200.242]) by mx1-us2.ppe-hosted.com with ESMTP id 0D7C4A4006F for <>; Fri, 1 Nov 2019 00:11:30 +0000 (UTC)
from jabbah.telkomsa.net (jabbah.telkomsa.net [196.25.211.3]) by smg.telkomsa.net (Telkom Internet Messaging Gateway) with SMTP id B8.D0.11338.0287BBD5; Fri, 1 Nov 2019 02:11:22 +0200 (CAT)
from mail5.telkomsa.net (unknown [192.168.16.227]) by jabbah.telkomsa.net (Postfix) with ESMTP id 71CC3905F1; Thu, 31 Oct 2019 20:15:17 +0200 (SAST)
Please see the attached file of my proposal letter
Thanks
Adrian Frost
Envelope Sender: <telkomsa206975@telkomsa.net>
'From' Header: Adrian Frost <telkomsa206975@telkomsa.net>
Subject: Hello
Timestamp: 19:11:32 CDT, Thursday 31 October 2019
Message-ID: <981086327.366503433.1572545717341.JavaMail.root@telkomsa.net>
Attachments: Artemis Fund Investment Ltd.doc
Client IP Address: 105.187.200.242
Client GeoIP Lookup: South Africa
Email Size: 38.5 kB
Encrypted? No
From: Adrian Frost <telkomsa206975@telkomsa.net> To: undisclosed-recipients:;19:11:32 CDT, Thursday 31 October 2019
Attachments: Artemis Fund Investment Ltd.doc
Message ID: <981086327.366503433.1572545717341.JavaMail.root@telkomsa.net>
Return Path: <telkomsa206975@telkomsa.net>
Reply To: adrianfrost07@gmail.com
MIME Version: 1.0
Content Type: multipart/mixed; boundary="----=_Part_366503431_313510095.1572545717337"
Attachments:
Artemis Fund Investment Ltd.doc [Content-Type: application/msword]
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.66.42]) by pure.maildistiller.com with ESMTPS id 5300E2C0054 for <>; Fri, 1 Nov 2019 00:11:32 +0000 (UTC)
from smg.telkomsa.net (smg.telkomsa.net [105.187.200.242]) by mx1-us2.ppe-hosted.com with ESMTP id 0D7C4A4006F for <>; Fri, 1 Nov 2019 00:11:30 +0000 (UTC)
from jabbah.telkomsa.net (jabbah.telkomsa.net [196.25.211.3]) by smg.telkomsa.net (Telkom Internet Messaging Gateway) with SMTP id B8.D0.11338.0287BBD5; Fri, 1 Nov 2019 02:11:22 +0200 (CAT)
from mail5.telkomsa.net (unknown [192.168.16.227]) by jabbah.telkomsa.net (Postfix) with ESMTP id 71CC3905F1; Thu, 31 Oct 2019 20:15:17 +0200 (SAST)
Please see the attached file of my proposal letter
Thanks
Adrian Frost
Envelope Sender: <telkomsa206975@telkomsa.net>
'From' Header: Adrian Frost <telkomsa206975@telkomsa.net>
Subject: Hello
Timestamp: 19:11:32 CDT, Thursday 31 October 2019
Message-ID: <981086327.366503433.1572545717341.JavaMail.root@telkomsa.net>
Attachments: Artemis Fund Investment Ltd.doc
Client IP Address: 105.187.200.242
Client GeoIP Lookup: South Africa
Email Size: 38.5 kB
Encrypted? No
DHL DELIVERY NOTIFICATION
NOTE: What is this joker imaging? Someone will actually respond to a stranger and get excited about some unknown package from a mysterious place? Or that someone would believe a stranger is just giving away millions of dollars? This is crazy! This email has been copied, pasted and sent to thousands of email addresses all over the world. Just delete these and save yourself the trouble of actually getting ripped off by a criminal.
From: Mr Gordon Fessler <brendanrichard164@yahoo.com> To:07:30:25 CDT, Thursday 31 October 2019
Attachments: None
Message ID: <1914839400.2417419.1572525022347@mail.yahoo.com>
Return Path: <brendanrichard164@yahoo.com>
Reply To: gordon_fessler@yahoo.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us4.ppe-hosted.com (unknown [10.7.66.41]) by pure.maildistiller.com with ESMTPS id ABC2240074 for <>; Thu, 31 Oct 2019 12:30:24 +0000 (UTC)
from sonic313-13.consmr.mail.bf2.yahoo.com (sonic313-13.consmr.mail.bf2.yahoo.com [74.6.133.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id 76C6B4C0075 for <>; Thu, 31 Oct 2019 12:30:24 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic313.consmr.mail.bf2.yahoo.com with HTTP; Thu, 31 Oct 2019 12:30:23 +0000
DHL DELIVERY NOTIFICATION Your ATM VISA CARD approved with Your EMAIL appeared and registered this morning for delivery with the total amount of $5.200,000 million USD and this was done in accordance with the United Nations ONLINE SCAM COMPENSATION SCHEME and the United Kingdom Debt recovery agency. All you have to do now is to Contact the verification officer (Mr. Gordon Fessler) his Email: ( gordon_fessler@yahoo.com ) with the following for proper verification and claim Processing give the agency your complete information for the swift and safe delivery of the package to you. You are advised to reconfirm the below listed information to enable us facilitate an immediate payment for you. Full Name_______ Mobile Phone Number_______ Age_________ Country________ Occupation_______ Current Home Address______ Nearest Airport_______ Kind Regards. Mr Brendan Richard.
Envelope Sender: <brendanrichard164@yahoo.com>
'From' Header: Mr Gordon Fessler <brendanrichard164@yahoo.com>
Subject: DHL DELIVERY NOTIFICATION
Timestamp: 07:30:25 CDT, Thursday 31 October 2019
Message-ID: <1914839400.2417419.1572525022347@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Client IP Address: 74.6.133.123
Client GeoIP Lookup: United States
Email Size: 3.9 kB
Encrypted? No
From: Mr Gordon Fessler <brendanrichard164@yahoo.com> To:07:30:25 CDT, Thursday 31 October 2019
Attachments: None
Message ID: <1914839400.2417419.1572525022347@mail.yahoo.com>
Return Path: <brendanrichard164@yahoo.com>
Reply To: gordon_fessler@yahoo.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us4.ppe-hosted.com (unknown [10.7.66.41]) by pure.maildistiller.com with ESMTPS id ABC2240074 for <>; Thu, 31 Oct 2019 12:30:24 +0000 (UTC)
from sonic313-13.consmr.mail.bf2.yahoo.com (sonic313-13.consmr.mail.bf2.yahoo.com [74.6.133.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id 76C6B4C0075 for <>; Thu, 31 Oct 2019 12:30:24 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic313.consmr.mail.bf2.yahoo.com with HTTP; Thu, 31 Oct 2019 12:30:23 +0000
DHL DELIVERY NOTIFICATION Your ATM VISA CARD approved with Your EMAIL appeared and registered this morning for delivery with the total amount of $5.200,000 million USD and this was done in accordance with the United Nations ONLINE SCAM COMPENSATION SCHEME and the United Kingdom Debt recovery agency. All you have to do now is to Contact the verification officer (Mr. Gordon Fessler) his Email: ( gordon_fessler@yahoo.com ) with the following for proper verification and claim Processing give the agency your complete information for the swift and safe delivery of the package to you. You are advised to reconfirm the below listed information to enable us facilitate an immediate payment for you. Full Name_______ Mobile Phone Number_______ Age_________ Country________ Occupation_______ Current Home Address______ Nearest Airport_______ Kind Regards. Mr Brendan Richard.
Envelope Sender: <brendanrichard164@yahoo.com>
'From' Header: Mr Gordon Fessler <brendanrichard164@yahoo.com>
Subject: DHL DELIVERY NOTIFICATION
Timestamp: 07:30:25 CDT, Thursday 31 October 2019
Message-ID: <1914839400.2417419.1572525022347@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Client IP Address: 74.6.133.123
Client GeoIP Lookup: United States
Email Size: 3.9 kB
Encrypted? No
Wednesday, October 30, 2019
Are you seeking for financial assistant ?
NOTE: Are you seeking financial assistance from a criminal? No? Then delete these stupidiots from your email.
From: Michael Francis Grace <federica.bellei@terredicastelli.mo.it> To:17:56:54 CDT, Tuesday 29 October 2019
Attachments: None
Message ID: <1245752946.8590219.1572389031658.JavaMail.zimbra@terredicastelli.mo.it>
Return Path: <federica.bellei@terredicastelli.mo.it>
Reply To: Michael Francis Grace <bridgewater_association@aol.com>
MIME Version: 1.0
Content Type: multipart/alternative; boundary="=_c507dcfb-880f-4e02-a78e-b473f33d7356"
Attachments:
None
Received:
from mx1-us4.ppe-hosted.com (unknown [10.7.66.38]) by pure.maildistiller.com with ESMTPS id 685BC40062 for < >; Tue, 29 Oct 2019 22:56:54 +0000 (UTC)
from mail3.terre-di-castelli.modena.it (mail3.terre-di-castelli.modena.it [195.62.175.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id 3313B800084 for < >; Tue, 29 Oct 2019 22:56:53 +0000 (UTC)
from [192.168.101.110] (port=41618 helo=zm.terredicastelli.mo.it) by mail3.terre-di-castelli.modena.it with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.82_1-5b7a7c0-XX) (envelope-from <federica.bellei@terredicastelli.mo.it>) id 1iPaDT-00049y-2e; Tue, 29 Oct 2019 23:43:55 +0100
from localhost (localhost [127.0.0.1]) by zm.terredicastelli.mo.it (Postfix) with ESMTP id 05D1390238B; Tue, 29 Oct 2019 23:43:55 +0100 (CET)
from zm.terredicastelli.mo.it ([127.0.0.1]) by localhost (zm.terredicastelli.mo.it [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id dgth3CNofSix; Tue, 29 Oct 2019 23:43:54 +0100 (CET)
from localhost (localhost [127.0.0.1]) by zm.terredicastelli.mo.it (Postfix) with ESMTP id AE53B902332; Tue, 29 Oct 2019 23:43:53 +0100 (CET)
from zm.terredicastelli.mo.it ([127.0.0.1]) by localhost (zm.terredicastelli.mo.it [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id wQOXihDWg2xm; Tue, 29 Oct 2019 23:43:53 +0100 (CET)
from zm.terredicastelli.mo.it (zm.terredicastelli.mo.it [192.168.101.110]) by zm.terredicastelli.mo.it (Postfix) with ESMTP id D4078902300; Tue, 29 Oct 2019 23:43:51 +0100 (CET)
Are you in need of a loan for your business,need fast loan for this coming Christmas/new year . for personal use ? Our offer provides loans with a low interest rate of 3%..Have you thought of obtaining a loan? Probably you have been turned down by your local bank? REPLY FOR MORE INFORMATION VIA: bridgewater_association@aol.com
Envelope Sender: <federica.bellei@terredicastelli.mo.it>
'From' Header: Michael Francis Grace <federica.bellei@terredicastelli.mo.it>
Subject: Are you seeking for financial assistant ?
Timestamp: 17:56:54 CDT, Tuesday 29 October 2019
Message-ID: <1245752946.8590219.1572389031658.JavaMail.zimbra@terredicastelli.mo.it>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Very High
Client IP Address: 195.62.175.137
Client GeoIP Lookup: Italy
Email Size: 3.6 kB
Encrypted? No
From: Michael Francis Grace <federica.bellei@terredicastelli.mo.it> To:17:56:54 CDT, Tuesday 29 October 2019
Attachments: None
Message ID: <1245752946.8590219.1572389031658.JavaMail.zimbra@terredicastelli.mo.it>
Return Path: <federica.bellei@terredicastelli.mo.it>
Reply To: Michael Francis Grace <bridgewater_association@aol.com>
MIME Version: 1.0
Content Type: multipart/alternative; boundary="=_c507dcfb-880f-4e02-a78e-b473f33d7356"
Attachments:
None
Received:
from mx1-us4.ppe-hosted.com (unknown [10.7.66.38]) by pure.maildistiller.com with ESMTPS id 685BC40062 for < >; Tue, 29 Oct 2019 22:56:54 +0000 (UTC)
from mail3.terre-di-castelli.modena.it (mail3.terre-di-castelli.modena.it [195.62.175.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id 3313B800084 for < >; Tue, 29 Oct 2019 22:56:53 +0000 (UTC)
from [192.168.101.110] (port=41618 helo=zm.terredicastelli.mo.it) by mail3.terre-di-castelli.modena.it with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.82_1-5b7a7c0-XX) (envelope-from <federica.bellei@terredicastelli.mo.it>) id 1iPaDT-00049y-2e; Tue, 29 Oct 2019 23:43:55 +0100
from localhost (localhost [127.0.0.1]) by zm.terredicastelli.mo.it (Postfix) with ESMTP id 05D1390238B; Tue, 29 Oct 2019 23:43:55 +0100 (CET)
from zm.terredicastelli.mo.it ([127.0.0.1]) by localhost (zm.terredicastelli.mo.it [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id dgth3CNofSix; Tue, 29 Oct 2019 23:43:54 +0100 (CET)
from localhost (localhost [127.0.0.1]) by zm.terredicastelli.mo.it (Postfix) with ESMTP id AE53B902332; Tue, 29 Oct 2019 23:43:53 +0100 (CET)
from zm.terredicastelli.mo.it ([127.0.0.1]) by localhost (zm.terredicastelli.mo.it [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id wQOXihDWg2xm; Tue, 29 Oct 2019 23:43:53 +0100 (CET)
from zm.terredicastelli.mo.it (zm.terredicastelli.mo.it [192.168.101.110]) by zm.terredicastelli.mo.it (Postfix) with ESMTP id D4078902300; Tue, 29 Oct 2019 23:43:51 +0100 (CET)
Are you in need of a loan for your business,need fast loan for this coming Christmas/new year . for personal use ? Our offer provides loans with a low interest rate of 3%..Have you thought of obtaining a loan? Probably you have been turned down by your local bank? REPLY FOR MORE INFORMATION VIA: bridgewater_association@aol.com
Envelope Sender: <federica.bellei@terredicastelli.mo.it>
'From' Header: Michael Francis Grace <federica.bellei@terredicastelli.mo.it>
Subject: Are you seeking for financial assistant ?
Timestamp: 17:56:54 CDT, Tuesday 29 October 2019
Message-ID: <1245752946.8590219.1572389031658.JavaMail.zimbra@terredicastelli.mo.it>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Very High
Client IP Address: 195.62.175.137
Client GeoIP Lookup: Italy
Email Size: 3.6 kB
Encrypted? No
Good day.
NOTE: Nope, this is not a personal email directed to you.... it's a copy and paste venture by a criminal being sent to many many people all over the world. They're looking for someone greedy/desperate enough to believe the nonsense written. I bet if you do a google search on this email content it'll come up multiple times as scammy spam. Delete these, save yourself the trouble of being roped into an international financial crime spree.
From: Anthony Wallace <Anthony.Wallace01@outlook.com> To: 20:48:32 CDT, Tuesday 29 October 2019
Attachments: None
Message ID: <89ec565e37afbb058ff5b42abd6747d7@eyeota.webgen.com>
Return Path: <Anthony.Wallace01@outlook.com>
Reply To: anthony_wallace01@aol.com
MIME Version: 1.0
Content Type: text/plain; charset=
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.7.65.200]) by pure.maildistiller.com with ESMTPS id E84C44004D for < >; Wed, 30 Oct 2019 01:48:31 +0000 (UTC)
from cloud.webgen-services.com (workflowhub.com [198.38.84.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id CE5EE800062 for < >; Wed, 30 Oct 2019 01:48:31 +0000 (UTC)
from eyeotawebgen by cloud.webgen-services.com with local (Exim 4.89_1) (envelope-from <Anthony.Wallace01@outlook.com>) id 1iPd60-0004xI-Ru for ; Tue, 29 Oct 2019 21:48:25 -0400
Hello, This is a personal email directed to you for your consideration alone. I request that it remain and be treated as such only. My name is Anthony Wallace. I'm a Belgian/British Citizen an Attorney. I have an interesting business proposal for you that will be of immense benefit to both of us, although this may be hard for you to believe, we stand to gain 5.7 Million Dollars between us in a matter of weeks. This is fully legal and 100% genuine. Kindly grant me the benefit of doubt and hear me out, I need you to signify your interest by replying to my email. Most importantly, I need you to keep whatever information between us even if you decide not to go along with me. I will make more details available to you on receipt of a positive response from you. Regards, Anthony Wallace.
Envelope Sender: <anthony.wallace01@outlook.com>
'From' Header: Anthony Wallace <Anthony.Wallace01@outlook.com>
Subject: Good day.
Timestamp: 20:48:32 CDT, Tuesday 29 October 2019
Message-ID: <89ec565e37afbb058ff5b42abd6747d7@eyeota.webgen.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
SPF (SoftFail) Medium
Client IP Address: 198.38.84.115
Client GeoIP Lookup: United States
Email Size: 2.8 kB
Encrypted? No
From: Anthony Wallace <Anthony.Wallace01@outlook.com> To: 20:48:32 CDT, Tuesday 29 October 2019
Attachments: None
Message ID: <89ec565e37afbb058ff5b42abd6747d7@eyeota.webgen.com>
Return Path: <Anthony.Wallace01@outlook.com>
Reply To: anthony_wallace01@aol.com
MIME Version: 1.0
Content Type: text/plain; charset=
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.7.65.200]) by pure.maildistiller.com with ESMTPS id E84C44004D for < >; Wed, 30 Oct 2019 01:48:31 +0000 (UTC)
from cloud.webgen-services.com (workflowhub.com [198.38.84.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id CE5EE800062 for < >; Wed, 30 Oct 2019 01:48:31 +0000 (UTC)
from eyeotawebgen by cloud.webgen-services.com with local (Exim 4.89_1) (envelope-from <Anthony.Wallace01@outlook.com>) id 1iPd60-0004xI-Ru for ; Tue, 29 Oct 2019 21:48:25 -0400
Hello, This is a personal email directed to you for your consideration alone. I request that it remain and be treated as such only. My name is Anthony Wallace. I'm a Belgian/British Citizen an Attorney. I have an interesting business proposal for you that will be of immense benefit to both of us, although this may be hard for you to believe, we stand to gain 5.7 Million Dollars between us in a matter of weeks. This is fully legal and 100% genuine. Kindly grant me the benefit of doubt and hear me out, I need you to signify your interest by replying to my email. Most importantly, I need you to keep whatever information between us even if you decide not to go along with me. I will make more details available to you on receipt of a positive response from you. Regards, Anthony Wallace.
Envelope Sender: <anthony.wallace01@outlook.com>
'From' Header: Anthony Wallace <Anthony.Wallace01@outlook.com>
Subject: Good day.
Timestamp: 20:48:32 CDT, Tuesday 29 October 2019
Message-ID: <89ec565e37afbb058ff5b42abd6747d7@eyeota.webgen.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
SPF (SoftFail) Medium
Client IP Address: 198.38.84.115
Client GeoIP Lookup: United States
Email Size: 2.8 kB
Encrypted? No
Get back to me
NOTE: So a stranger from a faraway place sends you an email demanding that you get back to them. This stranger is offering you riches, knows nothing about you or the thousands of others around the world who received the same mass spam email. The best thing you can do for yourself is delete these. There's no money from a stranger waiting for you, but there will be hell to pay if you think so.
From: "Justin Muzinich" <ricoh@tamex.pl> To: Recipients <ricoh@tamex.pl>13:44:28 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <201910301020.x9UAJd35072762@mail.tamex.pl>
Return Path: <ricoh@tamex.pl>
Reply To: justinmuzinich.treasury@yahoo.com
MIME Version: 1.0
Content Type: text/plain; charset="iso-8859-1"
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.7]) by pure.maildistiller.com with ESMTPS id 012121E005A for < >; Wed, 30 Oct 2019 18:44:28 +0000 (UTC)
from mail.tamex.pl (mail.tamex.com.pl [91.238.60.145]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id 9F8414C0066 for < >; Wed, 30 Oct 2019 18:44:27 +0000 (UTC)
from inst-rrhyu-VMSt.vcn.oraclevcn.com ([130.61.212.157]) (authenticated bits=0) by mail.tamex.pl (8.14.5/8.14.5) with ESMTP id x9UAJd35072762; Wed, 30 Oct 2019 11:20:25 +0100 (CET) (envelope-from ricoh@tamex.pl)
Dear Beneficiary, I am Justin Muzinich, Deputy Secretary of the Treasury, US Department of the Treasury. You can get more details about me here; https://home.treasury.gov/about/general-information/officials/justin-muzinich I have been tasked with the responsibility of liaising with beneficiaries regarding all previously unpaid/unclaimed funds and be sure all such funds are paid before the end of this fiscal year 2019. A directive has been issued to us to settle all outstanding payments accrued to individuals with respect to local and overseas contract payment, debt re-scheduling and outstanding compensation payment. We have been notified that you are yet to receive your fund. Fortunately, you have been selected alongside a few other beneficiaries to receive your own payment of $950,000 (Nine Hundred and Fifty Thousand United States Dollars only). This money will hence be transferred to your nominated bank account. You are advised to kindly reply this email with the below details enclosed to help us process your payment; (1) Full Names: (2) Residential Address: (3) Date of Birth: (4) Phone/Cell Number: (5) Occupation: Yours faithfully, Justin Muzinich, Deputy Secretary of the Treasury (US Department of the Treasury) Note: If you received this message in your SPAM/JUNK folder, it is because of the restrictions implemented by your Internet Service Provider, we urge you to treat it genuinely. The information contained in this e-mail is private & confidential and may also be legally privileged. If you are not the intended recipient, please notify us, preferably by e-mail.
Envelope Sender: <ricoh@tamex.pl>
'From' Header: "Justin Muzinich" <ricoh@tamex.pl>
Subject: Get back to me
Timestamp: 13:44:28 CDT, Wednesday 30 October 2019
Message-ID: <201910301020.x9UAJd35072762@mail.tamex.pl>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
SPF (HardFail) Very High
Client IP Address: 91.238.60.145
Client GeoIP Lookup: Poland
Email Size: 3.0 kB
Encrypted? No
From: "Justin Muzinich" <ricoh@tamex.pl> To: Recipients <ricoh@tamex.pl>13:44:28 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <201910301020.x9UAJd35072762@mail.tamex.pl>
Return Path: <ricoh@tamex.pl>
Reply To: justinmuzinich.treasury@yahoo.com
MIME Version: 1.0
Content Type: text/plain; charset="iso-8859-1"
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.7]) by pure.maildistiller.com with ESMTPS id 012121E005A for < >; Wed, 30 Oct 2019 18:44:28 +0000 (UTC)
from mail.tamex.pl (mail.tamex.com.pl [91.238.60.145]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id 9F8414C0066 for < >; Wed, 30 Oct 2019 18:44:27 +0000 (UTC)
from inst-rrhyu-VMSt.vcn.oraclevcn.com ([130.61.212.157]) (authenticated bits=0) by mail.tamex.pl (8.14.5/8.14.5) with ESMTP id x9UAJd35072762; Wed, 30 Oct 2019 11:20:25 +0100 (CET) (envelope-from ricoh@tamex.pl)
Dear Beneficiary, I am Justin Muzinich, Deputy Secretary of the Treasury, US Department of the Treasury. You can get more details about me here; https://home.treasury.gov/about/general-information/officials/justin-muzinich I have been tasked with the responsibility of liaising with beneficiaries regarding all previously unpaid/unclaimed funds and be sure all such funds are paid before the end of this fiscal year 2019. A directive has been issued to us to settle all outstanding payments accrued to individuals with respect to local and overseas contract payment, debt re-scheduling and outstanding compensation payment. We have been notified that you are yet to receive your fund. Fortunately, you have been selected alongside a few other beneficiaries to receive your own payment of $950,000 (Nine Hundred and Fifty Thousand United States Dollars only). This money will hence be transferred to your nominated bank account. You are advised to kindly reply this email with the below details enclosed to help us process your payment; (1) Full Names: (2) Residential Address: (3) Date of Birth: (4) Phone/Cell Number: (5) Occupation: Yours faithfully, Justin Muzinich, Deputy Secretary of the Treasury (US Department of the Treasury) Note: If you received this message in your SPAM/JUNK folder, it is because of the restrictions implemented by your Internet Service Provider, we urge you to treat it genuinely. The information contained in this e-mail is private & confidential and may also be legally privileged. If you are not the intended recipient, please notify us, preferably by e-mail.
Envelope Sender: <ricoh@tamex.pl>
'From' Header: "Justin Muzinich" <ricoh@tamex.pl>
Subject: Get back to me
Timestamp: 13:44:28 CDT, Wednesday 30 October 2019
Message-ID: <201910301020.x9UAJd35072762@mail.tamex.pl>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
SPF (HardFail) Very High
Client IP Address: 91.238.60.145
Client GeoIP Lookup: Poland
Email Size: 3.0 kB
Encrypted? No
ARE YOU DEAD OR ALIVE ?????????? REPLY HERE IMMEDIATELY.
NOTE: No matter how officious these criminals try to make their emails, they are still scam spam. This is a fine example of an international financial criminal trying to suck unsuspecting greedy victims into their thievery. Yes, they will steal from you when given the information they ask for while you believe it's for your benefit. It's not. Save yourself the trouble and delete these moronic missives.
From: foreignoffice payment <foreignpaymentoffice_cbn@yahoo.co.uk> To:01:24:34 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <1144572912.196099.1572416666524@mail.yahoo.com>
Return Path: <foreignpaymentoffice_cbn@yahoo.co.uk>
Reply To:
MIME Version: 1.0
Content Type: multipart/mixed; boundary="----=_Part_196098_839432077.1572416666524"
Attachments:
None
Received:
from mx1-us4.ppe-hosted.com (unknown [10.110.49.108]) by pure.maildistiller.com with ESMTPS id 9D5C81E004F for < >; Wed, 30 Oct 2019 06:24:33 +0000 (UTC)
from sonic302-19.consmr.mail.ir2.yahoo.com (sonic302-19.consmr.mail.ir2.yahoo.com [87.248.110.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id 297E714006D for < >; Wed, 30 Oct 2019 06:24:32 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic302.consmr.mail.ir2.yahoo.com with HTTP; Wed, 30 Oct 2019 06:24:30 +0000
Foreign payment Verification & Transfer Committee
Office of the Senate President.
Dear Beneficiary,
My Name is Barrister Robert Crawford,I am in charge of all unpaid Inheritance/Contract fund which all process of payment in your favor is in progress.A power of attorney was forwarded to my office this morning by your local associates and a Foreign partner Mr ALBERT HILL to claim your fund.
These gentleman claimed to be the representative of your company, and this power of attorney stated that you have died, they brought a picture of your burial and an account to replace your information and claimed your fund which it is right now lying DORMANT and UNCLAIMED, below is the new account they have submitted:
BANK.-BPI BANK
QUEZON AVE. DELTA BRANCH
QUEZON CITY, PHILIPPINES
ACCOUNT NO. 2984-0008-66
SWIFT CODE. BOPIPHMM
Be further informed that this power of attorney also stated that you suffered and died of a throat cancer. he also brought your burial pictures in confirmation that you are dead.You are therefore given 48 hrs to confirm the truth in this information if you are still alive .
As soon as we hear from you and confirm, we shall proceed with all arrangement for prompt payment ,You are not expected to pay any charges for receiving your fund.
You are advised to reconfirm the following information:
Full Name:
Full Address
Amount in question
You are advised to stop all communication with any office here and abroad for prompt payment.We are working to serve you better.
I awaits your urgent response.
Sincerely,
Barrister Robert Crawford.
Attached Picture that was submitted
Envelope Sender: <foreignpaymentoffice_cbn@yahoo.co.uk>
'From' Header: foreignoffice payment <foreignpaymentoffice_cbn@yahoo.co.uk>
Subject: ARE YOU DEAD OR ALIVE ?????????? REPLY HERE IMMEDIATELY.
Timestamp: 01:24:34 CDT, Wednesday 30 October 2019
Message-ID: <1144572912.196099.1572416666524@mail.yahoo.com>
Attachments: None
Client IP Address: 87.248.110.82
Client GeoIP Lookup: United Kingdom
Email Size: 390.6 kB
Encrypted? No
From: foreignoffice payment <foreignpaymentoffice_cbn@yahoo.co.uk> To:01:24:34 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <1144572912.196099.1572416666524@mail.yahoo.com>
Return Path: <foreignpaymentoffice_cbn@yahoo.co.uk>
Reply To:
MIME Version: 1.0
Content Type: multipart/mixed; boundary="----=_Part_196098_839432077.1572416666524"
Attachments:
None
Received:
from mx1-us4.ppe-hosted.com (unknown [10.110.49.108]) by pure.maildistiller.com with ESMTPS id 9D5C81E004F for < >; Wed, 30 Oct 2019 06:24:33 +0000 (UTC)
from sonic302-19.consmr.mail.ir2.yahoo.com (sonic302-19.consmr.mail.ir2.yahoo.com [87.248.110.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id 297E714006D for < >; Wed, 30 Oct 2019 06:24:32 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic302.consmr.mail.ir2.yahoo.com with HTTP; Wed, 30 Oct 2019 06:24:30 +0000
Foreign payment Verification & Transfer Committee
Office of the Senate President.
Dear Beneficiary,
My Name is Barrister Robert Crawford,I am in charge of all unpaid Inheritance/Contract fund which all process of payment in your favor is in progress.A power of attorney was forwarded to my office this morning by your local associates and a Foreign partner Mr ALBERT HILL to claim your fund.
These gentleman claimed to be the representative of your company, and this power of attorney stated that you have died, they brought a picture of your burial and an account to replace your information and claimed your fund which it is right now lying DORMANT and UNCLAIMED, below is the new account they have submitted:
BANK.-BPI BANK
QUEZON AVE. DELTA BRANCH
QUEZON CITY, PHILIPPINES
ACCOUNT NO. 2984-0008-66
SWIFT CODE. BOPIPHMM
Be further informed that this power of attorney also stated that you suffered and died of a throat cancer. he also brought your burial pictures in confirmation that you are dead.You are therefore given 48 hrs to confirm the truth in this information if you are still alive .
As soon as we hear from you and confirm, we shall proceed with all arrangement for prompt payment ,You are not expected to pay any charges for receiving your fund.
You are advised to reconfirm the following information:
Full Name:
Full Address
Amount in question
You are advised to stop all communication with any office here and abroad for prompt payment.We are working to serve you better.
I awaits your urgent response.
Sincerely,
Barrister Robert Crawford.
Attached Picture that was submitted
Envelope Sender: <foreignpaymentoffice_cbn@yahoo.co.uk>
'From' Header: foreignoffice payment <foreignpaymentoffice_cbn@yahoo.co.uk>
Subject: ARE YOU DEAD OR ALIVE ?????????? REPLY HERE IMMEDIATELY.
Timestamp: 01:24:34 CDT, Wednesday 30 October 2019
Message-ID: <1144572912.196099.1572416666524@mail.yahoo.com>
Attachments: None
Client IP Address: 87.248.110.82
Client GeoIP Lookup: United Kingdom
Email Size: 390.6 kB
Encrypted? No
hi
NOTE: You ARE NOT a Money Gram beneficiary. You ARE being sent an email from a free and anonymous email address promising you money that isn't there for you. But the information any victim provides hoping their greediness will pay off will only benefit the criminal behind this missive. Save yourself and stay away from these, don't answer, just delete.
From: skyebanktogo union <skyebakunion@gmail.com> To: undisclosed-recipients:;04:07:35 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <CALo+W3D3-u03RXFLMi3m1-p44p6KMZ7esUNtFSdAnAvy815Xpg@mail.gmail.com>
Return Path: <skyebakunion@gmail.com>
Reply To: ecobankdirectormanager117@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us3.ppe-hosted.com (unknown [10.110.49.104]) by pure.maildistiller.com with ESMTPS id 8CA514006A for < >; Wed, 30 Oct 2019 09:07:34 +0000 (UTC)
from mail-lf1-f66.google.com (mail-lf1-f66.google.com [209.85.167.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 4665EB80069 for < >; Wed, 30 Oct 2019 09:07:34 +0000 (UTC)
by mail-lf1-f66.google.com with SMTP id u16so951253lfq.3 for < >; Wed, 30 Oct 2019 02:07:34 -0700 (PDT)
by 2002:a2e:83cc:0:0:0:0:0 with HTTP; Wed, 30 Oct 2019 02:07:32 -0700 (PDT)
Dear Money Gram Beneficiary Customer, This is to official inform you that your compensation fund $800.000.00 has been awarded to our Money Gram office by Economic Community of West African States (ECOWAS) However (ECOWAS) has given our office 24hours deadline date to transfer your $800.000.00 total funds to you through Money Gram installment payment of $5,000. daily transfer. You will be receiving your Money Gram as soon as contact our Money-Gram payment office Mr.OKEKE JAMES Email jamesokeke70@gmail.com You will start receiving your installment payment $5,000. daily transfer as soon as you filled your receiver form to avoid any mistake in sending the the money to you through Money Gram. Your full names:__ __ __ __ __ Resident address:__ __ __ __ __ Phone number:__ __ __ __ __ Copy of your ID card and:__ __ __ __ __ Occupation :__ __ __ __ __ Thanks and my regards to your family. We pledge our best service at all times. Yours Sincerely, Mr. Peter Adams Phone number +22892062092 Foreign Operations Manager
Envelope Sender: <skyebakunion@gmail.com>
'From' Header: skyebanktogo union <skyebakunion@gmail.com>
Subject: hi
Timestamp: 04:07:35 CDT, Wednesday 30 October 2019
Message-ID: <CALo+W3D3-u03RXFLMi3m1-p44p6KMZ7esUNtFSdAnAvy815Xpg@mail.gmail.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Client IP Address: 209.85.167.66
Client GeoIP Lookup: United States
Email Size: 4.3 kB
Encrypted? No
From: skyebanktogo union <skyebakunion@gmail.com> To: undisclosed-recipients:;04:07:35 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <CALo+W3D3-u03RXFLMi3m1-p44p6KMZ7esUNtFSdAnAvy815Xpg@mail.gmail.com>
Return Path: <skyebakunion@gmail.com>
Reply To: ecobankdirectormanager117@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us3.ppe-hosted.com (unknown [10.110.49.104]) by pure.maildistiller.com with ESMTPS id 8CA514006A for < >; Wed, 30 Oct 2019 09:07:34 +0000 (UTC)
from mail-lf1-f66.google.com (mail-lf1-f66.google.com [209.85.167.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 4665EB80069 for < >; Wed, 30 Oct 2019 09:07:34 +0000 (UTC)
by mail-lf1-f66.google.com with SMTP id u16so951253lfq.3 for < >; Wed, 30 Oct 2019 02:07:34 -0700 (PDT)
by 2002:a2e:83cc:0:0:0:0:0 with HTTP; Wed, 30 Oct 2019 02:07:32 -0700 (PDT)
Dear Money Gram Beneficiary Customer, This is to official inform you that your compensation fund $800.000.00 has been awarded to our Money Gram office by Economic Community of West African States (ECOWAS) However (ECOWAS) has given our office 24hours deadline date to transfer your $800.000.00 total funds to you through Money Gram installment payment of $5,000. daily transfer. You will be receiving your Money Gram as soon as contact our Money-Gram payment office Mr.OKEKE JAMES Email jamesokeke70@gmail.com You will start receiving your installment payment $5,000. daily transfer as soon as you filled your receiver form to avoid any mistake in sending the the money to you through Money Gram. Your full names:__ __ __ __ __ Resident address:__ __ __ __ __ Phone number:__ __ __ __ __ Copy of your ID card and:__ __ __ __ __ Occupation :__ __ __ __ __ Thanks and my regards to your family. We pledge our best service at all times. Yours Sincerely, Mr. Peter Adams Phone number +22892062092 Foreign Operations Manager
Envelope Sender: <skyebakunion@gmail.com>
'From' Header: skyebanktogo union <skyebakunion@gmail.com>
Subject: hi
Timestamp: 04:07:35 CDT, Wednesday 30 October 2019
Message-ID: <CALo+W3D3-u03RXFLMi3m1-p44p6KMZ7esUNtFSdAnAvy815Xpg@mail.gmail.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Client IP Address: 209.85.167.66
Client GeoIP Lookup: United States
Email Size: 4.3 kB
Encrypted? No
Greetings,
NOTE: This idiot must have realized sending thousands of emails at a time triggers alerts and broke the batches into smaller ones. It's still all BS, nothing honest here. Delete these emails fo ryour own safety and don't look back.
From: Mrs rebecca <jorebeeo@gmail.com> To:05:09:44 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <503407719.2019259.1572430181018@mail.yahoo.com>
Return Path: <jorebeeo@gmail.com>
Reply To: rebeccajo489@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.65.174]) by pure.maildistiller.com with ESMTPS id 1D43D1A0055 for < >; Wed, 30 Oct 2019 10:09:44 +0000 (UTC)
from sonic310-13.consmr.mail.bf2.yahoo.com (sonic310-13.consmr.mail.bf2.yahoo.com [74.6.135.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id DE1011C0064 for < >; Wed, 30 Oct 2019 10:09:43 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic310.consmr.mail.bf2.yahoo.com with HTTP; Wed, 30 Oct 2019 10:09:42 +0000
Greetings, I am Mrs rebecca john, I married to late Mr. Jude john as an widow suffering from long time illness Cancer, the doctors have been trying there best but the truth is that I am not getting better. I want to make a donation of ($ 6. Million) to help Orphans and Widows and Charitable home in your Country and I assumed that you will be able to receive this Fund and use it to my wished to the needs in your country. I am seriously ill please always putting me in your daily prayers because I don't know when it will end with me.Reply back to me immediately for more details. Sincerely, Mrs rebecca john.
Envelope Sender: <jorebeeo@gmail.com>
'From' Header: Mrs rebecca <jorebeeo@gmail.com>
Subject: Greetings,
Timestamp: 05:09:44 CDT, Wednesday 30 October 2019
Message-ID: <503407719.2019259.1572430181018@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Low
Client IP Address: 74.6.135.123
Client GeoIP Lookup: United States
Email Size: 3.6 kB
Encrypted? No
From: Mrs rebecca <jorebeeo@gmail.com> To:05:09:44 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <503407719.2019259.1572430181018@mail.yahoo.com>
Return Path: <jorebeeo@gmail.com>
Reply To: rebeccajo489@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.65.174]) by pure.maildistiller.com with ESMTPS id 1D43D1A0055 for < >; Wed, 30 Oct 2019 10:09:44 +0000 (UTC)
from sonic310-13.consmr.mail.bf2.yahoo.com (sonic310-13.consmr.mail.bf2.yahoo.com [74.6.135.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id DE1011C0064 for < >; Wed, 30 Oct 2019 10:09:43 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic310.consmr.mail.bf2.yahoo.com with HTTP; Wed, 30 Oct 2019 10:09:42 +0000
Greetings, I am Mrs rebecca john, I married to late Mr. Jude john as an widow suffering from long time illness Cancer, the doctors have been trying there best but the truth is that I am not getting better. I want to make a donation of ($ 6. Million) to help Orphans and Widows and Charitable home in your Country and I assumed that you will be able to receive this Fund and use it to my wished to the needs in your country. I am seriously ill please always putting me in your daily prayers because I don't know when it will end with me.Reply back to me immediately for more details. Sincerely, Mrs rebecca john.
Envelope Sender: <jorebeeo@gmail.com>
'From' Header: Mrs rebecca <jorebeeo@gmail.com>
Subject: Greetings,
Timestamp: 05:09:44 CDT, Wednesday 30 October 2019
Message-ID: <503407719.2019259.1572430181018@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Low
Client IP Address: 74.6.135.123
Client GeoIP Lookup: United States
Email Size: 3.6 kB
Encrypted? No
Re: Please ,confirm this information to us now
NOTE: First off, if any one of the thousands of people this was sent to replied as the "Re" suggests, I feel very bad for them. This is an introduction to a rip-off. "Confirm this information to us now" is a demand to provide information that will allow this criminal to plunder your financial reputation. Just stay away from these lazy copy and paste fools.
From: Joe Pepple <bankplc.stanbicibtc@yahoo.com> To:06:22:44 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <626493816.2022543.1572434558330@mail.yahoo.com>
Return Path: <bankplc.stanbicibtc@yahoo.com>
Reply To: bankplc.stanbicibtc@yahoo.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.66.42]) by pure.maildistiller.com with ESMTPS id 95EE414004D for < >; Wed, 30 Oct 2019 11:22:43 +0000 (UTC)
from sonic305-1.consmr.mail.bf2.yahoo.com (sonic305-1.consmr.mail.bf2.yahoo.com [74.6.133.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id 5EB6BA40073 for < >; Wed, 30 Oct 2019 11:22:43 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic305.consmr.mail.bf2.yahoo.com with HTTP; Wed, 30 Oct 2019 11:22:41 +0000
Attention Sir With regards to your file which was forwarded to my table since 3 days ago for review for payment of your Contract/inheritance amount of $10.5 Million, it has come to my notice that your payment fund have been abandoned as unclaimed fund waiting to be to processed for deposit into the Government Treasury. Be informed that your payment has been approved by Committee Chairman on foreign payment set up by the presidency to offset all unpaid contracts/Inheritance payments. This is a special payment arrangement through the presidency in conjunction with the U.N that you will might travel in this regards to sign in person the Foreign Payment release Order and proceed to our foreign payment Center with Gift Souvenir for the official which will Identify you as the approved to receive your payment with the help of some special official OR that can still be released though a diplomtic mean / ATM card. Please send copy of your valid International Passport OR ID card to enable us to make the necessary approvals or your funds processing and to avoid any mistake. It has come to my notice that some people are asking you to send money for this purpose there for you are strictly warned not to inform any body or group of persons about this payment plan. You must keep it secrete and confidential. Please provide the following details as stated below to enable us commence your funds process as soon as possible. 1. Full name: ...... 2. Address if Changed:....... 3. Tel:............ 4. International Passport i.d 5. Name of Nearest International Airport to you. Note that you are not required to deal with any one else in regards to this special arrangement to avoid extortion of money from you. Be advised to keep this transaction very confidential Regards, Joe Pepple
Envelope Sender: <bankplc.stanbicibtc@yahoo.com>
'From' Header: Joe Pepple <bankplc.stanbicibtc@yahoo.com>
Subject: Re: Please ,confirm this information to us now
Timestamp: 06:22:44 CDT, Wednesday 30 October 2019
Message-ID: <626493816.2022543.1572434558330@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Client IP Address: 74.6.133.40
Client GeoIP Lookup: United States
Email Size: 4.9 kB
Encrypted? No
From: Joe Pepple <bankplc.stanbicibtc@yahoo.com> To:06:22:44 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <626493816.2022543.1572434558330@mail.yahoo.com>
Return Path: <bankplc.stanbicibtc@yahoo.com>
Reply To: bankplc.stanbicibtc@yahoo.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Attachments:
None
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.66.42]) by pure.maildistiller.com with ESMTPS id 95EE414004D for < >; Wed, 30 Oct 2019 11:22:43 +0000 (UTC)
from sonic305-1.consmr.mail.bf2.yahoo.com (sonic305-1.consmr.mail.bf2.yahoo.com [74.6.133.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id 5EB6BA40073 for < >; Wed, 30 Oct 2019 11:22:43 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic305.consmr.mail.bf2.yahoo.com with HTTP; Wed, 30 Oct 2019 11:22:41 +0000
Attention Sir With regards to your file which was forwarded to my table since 3 days ago for review for payment of your Contract/inheritance amount of $10.5 Million, it has come to my notice that your payment fund have been abandoned as unclaimed fund waiting to be to processed for deposit into the Government Treasury. Be informed that your payment has been approved by Committee Chairman on foreign payment set up by the presidency to offset all unpaid contracts/Inheritance payments. This is a special payment arrangement through the presidency in conjunction with the U.N that you will might travel in this regards to sign in person the Foreign Payment release Order and proceed to our foreign payment Center with Gift Souvenir for the official which will Identify you as the approved to receive your payment with the help of some special official OR that can still be released though a diplomtic mean / ATM card. Please send copy of your valid International Passport OR ID card to enable us to make the necessary approvals or your funds processing and to avoid any mistake. It has come to my notice that some people are asking you to send money for this purpose there for you are strictly warned not to inform any body or group of persons about this payment plan. You must keep it secrete and confidential. Please provide the following details as stated below to enable us commence your funds process as soon as possible. 1. Full name: ...... 2. Address if Changed:....... 3. Tel:............ 4. International Passport i.d 5. Name of Nearest International Airport to you. Note that you are not required to deal with any one else in regards to this special arrangement to avoid extortion of money from you. Be advised to keep this transaction very confidential Regards, Joe Pepple
Envelope Sender: <bankplc.stanbicibtc@yahoo.com>
'From' Header: Joe Pepple <bankplc.stanbicibtc@yahoo.com>
Subject: Re: Please ,confirm this information to us now
Timestamp: 06:22:44 CDT, Wednesday 30 October 2019
Message-ID: <626493816.2022543.1572434558330@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Client IP Address: 74.6.133.40
Client GeoIP Lookup: United States
Email Size: 4.9 kB
Encrypted? No
INFORMATION
NOTE: Wow, the Bank of Nigeria, cause that's not a hotbed of criminality. First time you ever see Nigeria in any of your emails is the time the red flags should be hopping around in your brain and hitting you in the eyeballs. Delete these. Don't respond, don't look back. No good will come of replying to these even in jest.
From: Godwin Emefiele <adaxconssec@gmail.com> To: undisclosed-recipients:;07:44:42 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <CADMjKiJHoKo5qc4AJO+h8mLGSN2V9BcAXAEFy-YUTcgOet7cKQ@mail.gmail.com>
Return Path: <adaxconssec@gmail.com>
Reply To:
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.7]) by pure.maildistiller.com with ESMTPS id 0ADAB1E005F for < >; Wed, 30 Oct 2019 12:44:42 +0000 (UTC)
from mail-oi1-f173.google.com (mail-oi1-f173.google.com [209.85.167.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id EBD664C0058 for < >; Wed, 30 Oct 2019 12:44:41 +0000 (UTC)
by mail-oi1-f173.google.com with SMTP id m193so1842975oig.0 for < >; Wed, 30 Oct 2019 05:44:41 -0700 (PDT)
by 2002:a4a:3054:0:0:0:0:0 with HTTP; Wed, 30 Oct 2019 05:44:40 -0700 (PDT)
-- CENTRAL BANK OF NIGERIA TINUBU SQUARE LAGOS FROM THE DESK OF:GODWIN EMEFIELE EXECUTIVE GOVERNOR CENTRAL BANK OF NIGERIA.(CBN) OUR REF: CBN/IRD/CBX/021/19. ATTN: SIR/MADAM MY NAME IS GODWIN EMEFIELE, GOVERNOR CENTRAL BANK OF NIGERIA. WE HAVE JUST RECIEVED A SWORN AFFIDAVIT FROM MR. JEROME F. KARLZ OF UNITED STATES OF AMERICA THAT YOU ARE DEAD AND THAT YOU SIGNED A DEED AGREEMENT WITH HIM TO DIVERT YOUR CONTRACTUAL FUND OF $12.3M. HE CLAIMED THAT HE IS YOUR NEXT OF KIN. PLEASE RECONFIRM AND AND FORWARD YOUR CONTACT DETAILS THROUGH MY PRIVATE EMAIL: centbbknngg@gmail.com 1. YOUR FULL NAME: 2. YOUR CONTACT ADDRESS 3. YOUR CONTACT CELL PHONE NUMBER: 4. YOUR AGE: 5. YOUR SEX: 6. YOUR OCCUPATIONS: 7. YOUR COUNTRY AND CITY: BEST REGARDS, GODWIN EMEFIELE GOVERNOR CENTRAL BANK OF NIGERIA
Envelope Sender: <adaxconssec@gmail.com>
'From' Header: Godwin Emefiele <adaxconssec@gmail.com>
Subject: INFORMATION
Timestamp: 07:44:42 CDT, Wednesday 30 October 2019
Message-ID: <CADMjKiJHoKo5qc4AJO+h8mLGSN2V9BcAXAEFy-YUTcgOet7cKQ@mail.gmail.com>
Attachments: None
Client IP Address: 209.85.167.173
Client GeoIP Lookup: United States
Email Size: 3.5 kB
Encrypted? No
From: Godwin Emefiele <adaxconssec@gmail.com> To: undisclosed-recipients:;07:44:42 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <CADMjKiJHoKo5qc4AJO+h8mLGSN2V9BcAXAEFy-YUTcgOet7cKQ@mail.gmail.com>
Return Path: <adaxconssec@gmail.com>
Reply To:
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.7]) by pure.maildistiller.com with ESMTPS id 0ADAB1E005F for < >; Wed, 30 Oct 2019 12:44:42 +0000 (UTC)
from mail-oi1-f173.google.com (mail-oi1-f173.google.com [209.85.167.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id EBD664C0058 for < >; Wed, 30 Oct 2019 12:44:41 +0000 (UTC)
by mail-oi1-f173.google.com with SMTP id m193so1842975oig.0 for < >; Wed, 30 Oct 2019 05:44:41 -0700 (PDT)
by 2002:a4a:3054:0:0:0:0:0 with HTTP; Wed, 30 Oct 2019 05:44:40 -0700 (PDT)
-- CENTRAL BANK OF NIGERIA TINUBU SQUARE LAGOS FROM THE DESK OF:GODWIN EMEFIELE EXECUTIVE GOVERNOR CENTRAL BANK OF NIGERIA.(CBN) OUR REF: CBN/IRD/CBX/021/19. ATTN: SIR/MADAM MY NAME IS GODWIN EMEFIELE, GOVERNOR CENTRAL BANK OF NIGERIA. WE HAVE JUST RECIEVED A SWORN AFFIDAVIT FROM MR. JEROME F. KARLZ OF UNITED STATES OF AMERICA THAT YOU ARE DEAD AND THAT YOU SIGNED A DEED AGREEMENT WITH HIM TO DIVERT YOUR CONTRACTUAL FUND OF $12.3M. HE CLAIMED THAT HE IS YOUR NEXT OF KIN. PLEASE RECONFIRM AND AND FORWARD YOUR CONTACT DETAILS THROUGH MY PRIVATE EMAIL: centbbknngg@gmail.com 1. YOUR FULL NAME: 2. YOUR CONTACT ADDRESS 3. YOUR CONTACT CELL PHONE NUMBER: 4. YOUR AGE: 5. YOUR SEX: 6. YOUR OCCUPATIONS: 7. YOUR COUNTRY AND CITY: BEST REGARDS, GODWIN EMEFIELE GOVERNOR CENTRAL BANK OF NIGERIA
Envelope Sender: <adaxconssec@gmail.com>
'From' Header: Godwin Emefiele <adaxconssec@gmail.com>
Subject: INFORMATION
Timestamp: 07:44:42 CDT, Wednesday 30 October 2019
Message-ID: <CADMjKiJHoKo5qc4AJO+h8mLGSN2V9BcAXAEFy-YUTcgOet7cKQ@mail.gmail.com>
Attachments: None
Client IP Address: 209.85.167.173
Client GeoIP Lookup: United States
Email Size: 3.5 kB
Encrypted? No
NO TIME TO WASTE, REPLY URGENTLY
NOTE: Everyday same criminals and copied missives. Nope no money here for you but this crook is hoping to get their hands on as much info as possible to use your identity to make money, get stuff and ruin your life. Delete these lazy a**es who don't want to work for a living. And what's with the weird subject? Reply urgently????? LOL
From: Mahdi Kaamil <km301029@gmail.com> To:10:31:08 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <563116180.2104856.1572449465067@mail.yahoo.com>
Return Path: <km301029@gmail.com>
Reply To: Mahdi Kaamil <mahdi2018kaamil@gmail.com>
MIME Version: 1.0
Content Type: multipart/alternative; boundary="----=_Part_2104855_1885326486.1572449465066"
Attachments:
None
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.65.176]) by pure.maildistiller.com with ESMTPS id 05C1D40050 for < >; Wed, 30 Oct 2019 15:31:08 +0000 (UTC)
from sonic303-2.consmr.mail.bf2.yahoo.com (sonic303-2.consmr.mail.bf2.yahoo.com [74.6.131.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id C6B046800AB for < >; Wed, 30 Oct 2019 15:31:07 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic303.consmr.mail.bf2.yahoo.com with HTTP; Wed, 30 Oct 2019 15:31:06 +0000
Dear Friend,
My name is Mr. Mahdi Kaamil. I am working with one of the prime banks in Burkina Faso. Here in this bank existed a dormant account for many years, which belong to one of our late foreign customers. The amount in this account values at $13,300,000.00 (Thirteen Million Three Hundred Thousand US Dollars). The bank wants to confiscate this fund according to the ethics of our bank, because it has overstayed.
I seek your consent to partner with you in this business transaction. I want a foreign account where the bank will transfer this fund. This is a genuine, risk free and legal business transaction. All details shall be sent to you once you indicate your interest.
If you are really sure of your sincerity, trustworthiness, accountability and confidentiality over this transaction, reply back to me urgently.
Best regards,
Mr. Mahdi Kaamil
Envelope Sender: <km301029@gmail.com>
'From' Header: Mahdi Kaamil <km301029@gmail.com>
Subject: NO TIME TO WASTE, REPLY URGENTLY
Timestamp: 10:31:08 CDT, Wednesday 30 October 2019
Message-ID: <563116180.2104856.1572449465067@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Very High
Client IP Address: 74.6.131.41
Client GeoIP Lookup: United States
Email Size: 5.7 kB
Encrypted? No
From: Mahdi Kaamil <km301029@gmail.com> To:10:31:08 CDT, Wednesday 30 October 2019
Attachments: None
Message ID: <563116180.2104856.1572449465067@mail.yahoo.com>
Return Path: <km301029@gmail.com>
Reply To: Mahdi Kaamil <mahdi2018kaamil@gmail.com>
MIME Version: 1.0
Content Type: multipart/alternative; boundary="----=_Part_2104855_1885326486.1572449465066"
Attachments:
None
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.65.176]) by pure.maildistiller.com with ESMTPS id 05C1D40050 for < >; Wed, 30 Oct 2019 15:31:08 +0000 (UTC)
from sonic303-2.consmr.mail.bf2.yahoo.com (sonic303-2.consmr.mail.bf2.yahoo.com [74.6.131.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id C6B046800AB for < >; Wed, 30 Oct 2019 15:31:07 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic303.consmr.mail.bf2.yahoo.com with HTTP; Wed, 30 Oct 2019 15:31:06 +0000
Dear Friend,
My name is Mr. Mahdi Kaamil. I am working with one of the prime banks in Burkina Faso. Here in this bank existed a dormant account for many years, which belong to one of our late foreign customers. The amount in this account values at $13,300,000.00 (Thirteen Million Three Hundred Thousand US Dollars). The bank wants to confiscate this fund according to the ethics of our bank, because it has overstayed.
I seek your consent to partner with you in this business transaction. I want a foreign account where the bank will transfer this fund. This is a genuine, risk free and legal business transaction. All details shall be sent to you once you indicate your interest.
If you are really sure of your sincerity, trustworthiness, accountability and confidentiality over this transaction, reply back to me urgently.
Best regards,
Mr. Mahdi Kaamil
Envelope Sender: <km301029@gmail.com>
'From' Header: Mahdi Kaamil <km301029@gmail.com>
Subject: NO TIME TO WASTE, REPLY URGENTLY
Timestamp: 10:31:08 CDT, Wednesday 30 October 2019
Message-ID: <563116180.2104856.1572449465067@mail.yahoo.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Very High
Client IP Address: 74.6.131.41
Client GeoIP Lookup: United States
Email Size: 5.7 kB
Encrypted? No
Tuesday, October 29, 2019
Scam victims And E-mail Address Owner,
NOTE: Awful bold move to falsely claim they're from the International Monetary Fund. Coincidentally this group does not reach out to scam victims nor do they create victims by sending emails like this from a gmail account! Pay attention to sender email addresses and typos ... don't answer these, delete them. If you provide any information to these criminals it will be used against you in nefarious ways and you'll be sorry when your financial life is plundered.
From: "From Federal Bureau (IMF)" <cmbcas102@gmail.com> To: undisclosed-recipients:;13:53:24 CDT, Tuesday 29 October 2019
Attachments: None
Message ID: <CAFS=5-Nb4OEozEDB4q7U8jEkVmQx1uZTaPRp9SmZ3EaxhdvBcg@mail.gmail.com>
Return Path: <cmbcas102@gmail.com>
Reply To:
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.8]) by pure.maildistiller.com with ESMTPS id DEC051E006B for < ; Tue, 29 Oct 2019 18:53:23 +0000 (UTC)
from mail-lf1-f65.google.com (mail-lf1-f65.google.com [209.85.167.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id 941B44C0061 for < ; Tue, 29 Oct 2019 18:53:23 +0000 (UTC)
by mail-lf1-f65.google.com with SMTP id z12so11346554lfj.9 for < ; Tue, 29 Oct 2019 11:53:23 -0700 (PDT)
by 2002:a19:9152:0:0:0:0:0 with HTTP; Tue, 29 Oct 2019 11:53:21 -0700 (PDT)
-- Attention: Scam victims And E-mail Address Owner, Sequel to the meeting held with Federal Bureau of Investigation, The International Monetary Fund (IMF) is compensating all the scam victims and some email users which your name and email address was found on the list. This is to pay all the Fraud Victims who lost the money to scammers in African countries more especially Nigeria and from all the Francophone countries, Rejoice you have been compensated with amount $850,000 usd for self support to help individuals to own a self charity organization also for you to build your Personal Company/organization so as to help the less privileged in there society due to the financial crisis. This includes people that lost their money on fake inheritance AND fake lotto and Online dating scams. We found your name in the list of those who are to benefit from this compensation and decided to contact you through this way. In case you have not received YOUR benefit, Kindly contact our office in Brazil REV .Edward Parrish E mail: edwradparrish6@gmail.com Contact Him immediately and request for your ATM VISA CARD if you have not receive your parcel Best regards, Mrs Rose Goodman
Envelope Sender: <cmbcas102@gmail.com>
'From' Header: "From Federal Bureau (IMF)" <cmbcas102@gmail.com>
Subject: Attention: Scam victims And E-mail Address Owner,
Timestamp: 13:53:24 CDT, Tuesday 29 October 2019
Message-ID: <CAFS=5-Nb4OEozEDB4q7U8jEkVmQx1uZTaPRp9SmZ3EaxhdvBcg@mail.gmail.com>
Attachments: None
Client IP Address: 209.85.167.65
Client GeoIP Lookup: United States
Email Size: 4.0 kB
Encrypted? No
From: "From Federal Bureau (IMF)" <cmbcas102@gmail.com> To: undisclosed-recipients:;13:53:24 CDT, Tuesday 29 October 2019
Attachments: None
Message ID: <CAFS=5-Nb4OEozEDB4q7U8jEkVmQx1uZTaPRp9SmZ3EaxhdvBcg@mail.gmail.com>
Return Path: <cmbcas102@gmail.com>
Reply To:
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.8]) by pure.maildistiller.com with ESMTPS id DEC051E006B for < ; Tue, 29 Oct 2019 18:53:23 +0000 (UTC)
from mail-lf1-f65.google.com (mail-lf1-f65.google.com [209.85.167.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id 941B44C0061 for < ; Tue, 29 Oct 2019 18:53:23 +0000 (UTC)
by mail-lf1-f65.google.com with SMTP id z12so11346554lfj.9 for < ; Tue, 29 Oct 2019 11:53:23 -0700 (PDT)
by 2002:a19:9152:0:0:0:0:0 with HTTP; Tue, 29 Oct 2019 11:53:21 -0700 (PDT)
-- Attention: Scam victims And E-mail Address Owner, Sequel to the meeting held with Federal Bureau of Investigation, The International Monetary Fund (IMF) is compensating all the scam victims and some email users which your name and email address was found on the list. This is to pay all the Fraud Victims who lost the money to scammers in African countries more especially Nigeria and from all the Francophone countries, Rejoice you have been compensated with amount $850,000 usd for self support to help individuals to own a self charity organization also for you to build your Personal Company/organization so as to help the less privileged in there society due to the financial crisis. This includes people that lost their money on fake inheritance AND fake lotto and Online dating scams. We found your name in the list of those who are to benefit from this compensation and decided to contact you through this way. In case you have not received YOUR benefit, Kindly contact our office in Brazil REV .Edward Parrish E mail: edwradparrish6@gmail.com Contact Him immediately and request for your ATM VISA CARD if you have not receive your parcel Best regards, Mrs Rose Goodman
Envelope Sender: <cmbcas102@gmail.com>
'From' Header: "From Federal Bureau (IMF)" <cmbcas102@gmail.com>
Subject: Attention: Scam victims And E-mail Address Owner,
Timestamp: 13:53:24 CDT, Tuesday 29 October 2019
Message-ID: <CAFS=5-Nb4OEozEDB4q7U8jEkVmQx1uZTaPRp9SmZ3EaxhdvBcg@mail.gmail.com>
Attachments: None
Client IP Address: 209.85.167.65
Client GeoIP Lookup: United States
Email Size: 4.0 kB
Encrypted? No
[Spam] Dear friend
NOTE: Don't be fooled, be cautious. There's no need for any assistance except to provide the information this crook needs to steal from you. Nothing about this message has any truth to it. If it pulls your heartstrings, that's merely manipulation talking to you. Don't be manipulated and treated like an idiot. That's all these authors see their victims as ... stupid. Don't be one, delete these.
From: Becky Koulibaly <francieli.caroline@posgrad.ufsc.br> To: undisclosed-recipients:;01:22:51 CDT, Tuesday 29 October 2019
Attachments: None
Message ID: <01f5e966a189a681771a3b6f532baba0@posgrad.ufsc.br>
Return Path: <francieli.caroline@posgrad.ufsc.br>
Reply To: beckykoulibaly@aol.com
MIME Version: 1.0
Content Type: multipart/alternative; boundary="=_9c98c8ef8e58de7774885f19ab63e639"
Attachments:
None
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.34]) by pure.maildistiller.com with ESMTPS id C4CF9140056 for < >; Tue, 29 Oct 2019 06:22:50 +0000 (UTC)
from antispam2.setic.ufsc.br (as183.setic.ufsc.br [150.162.2.183]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 61A7F600057 for < >; Tue, 29 Oct 2019 06:22:49 +0000 (UTC)
from localhost (localhost [127.0.0.1]) by antispam2.setic.ufsc.br (Vertip Secure Mail) with ESMTP id 1DE7F3F419C; Tue, 29 Oct 2019 04:22:48 -0200 (BRST)
from smtp.mail.ufsc.br (smtp.mail.ufsc.br [150.162.2.72]) by as75.setic.ufsc.br (Vertip Secure Mail) with ESMTP id B7174254004; Tue, 29 Oct 2019 04:22:46 -0200 (BRST)
from webmail.ufsc.br (webmail2016.setic.ufsc.br [150.162.2.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: francieli.caroline@posgrad.ufsc.br) by smtp.mail.ufsc.br (Postfix) with ESMTPSA id 7863F10003D; Tue, 29 Oct 2019 03:22:46 -0300 (-03)
from wimax-154.68.5.161.aviso.ci ([154.68.5.161]) via paginas.ufsc.br ([150.162.2.10]) by webmail.ufsc.br with HTTP (HTTP/1.0 POST); Tue, 29 Oct 2019 03:22:46 -0300
--
Dearest one
I am Becky Koulibaly, the only child of Late Mr Abbas Koulibaly, Former Oil and Gas Petroleum dealer, I lost my parents in a political crisis here in my Country. That is the reason why I need your assistance for Investment, This might be a surprise to you about where I got your contact. I got your contact from the internet search for a reliable person after i fasted and prayed I decided to contact you. I am contacting you in other for you to help me with the transfer and investing of my inheritance in your country.
once i hear from you,i will give you details about the sum of Euro EUR 6,5 Million left for me by my late parents and how i will want you to assist me in investing it wisely in your country. I want you to know that I am willing to offer you 20% out of the total money for your Assistance for helping me regarding the transfer and investment there in your country.
Thanks and God bless.
Best regards
Becky
Envelope Sender: <francieli.caroline@posgrad.ufsc.br>
'From' Header: Becky Koulibaly <francieli.caroline@posgrad.ufsc.br>
Subject: [Spam] Dear friend
Timestamp: 01:22:51 CDT, Tuesday 29 October 2019
Message-ID: <01f5e966a189a681771a3b6f532baba0@posgrad.ufsc.br>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Medium
Client IP Address: 150.162.2.183
Client GeoIP Lookup: Brazil
Email Size: 5.3 kB
Encrypted? No
From: Becky Koulibaly <francieli.caroline@posgrad.ufsc.br> To: undisclosed-recipients:;01:22:51 CDT, Tuesday 29 October 2019
Attachments: None
Message ID: <01f5e966a189a681771a3b6f532baba0@posgrad.ufsc.br>
Return Path: <francieli.caroline@posgrad.ufsc.br>
Reply To: beckykoulibaly@aol.com
MIME Version: 1.0
Content Type: multipart/alternative; boundary="=_9c98c8ef8e58de7774885f19ab63e639"
Attachments:
None
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.34]) by pure.maildistiller.com with ESMTPS id C4CF9140056 for < >; Tue, 29 Oct 2019 06:22:50 +0000 (UTC)
from antispam2.setic.ufsc.br (as183.setic.ufsc.br [150.162.2.183]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 61A7F600057 for < >; Tue, 29 Oct 2019 06:22:49 +0000 (UTC)
from localhost (localhost [127.0.0.1]) by antispam2.setic.ufsc.br (Vertip Secure Mail) with ESMTP id 1DE7F3F419C; Tue, 29 Oct 2019 04:22:48 -0200 (BRST)
from smtp.mail.ufsc.br (smtp.mail.ufsc.br [150.162.2.72]) by as75.setic.ufsc.br (Vertip Secure Mail) with ESMTP id B7174254004; Tue, 29 Oct 2019 04:22:46 -0200 (BRST)
from webmail.ufsc.br (webmail2016.setic.ufsc.br [150.162.2.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: francieli.caroline@posgrad.ufsc.br) by smtp.mail.ufsc.br (Postfix) with ESMTPSA id 7863F10003D; Tue, 29 Oct 2019 03:22:46 -0300 (-03)
from wimax-154.68.5.161.aviso.ci ([154.68.5.161]) via paginas.ufsc.br ([150.162.2.10]) by webmail.ufsc.br with HTTP (HTTP/1.0 POST); Tue, 29 Oct 2019 03:22:46 -0300
--
Dearest one
I am Becky Koulibaly, the only child of Late Mr Abbas Koulibaly, Former Oil and Gas Petroleum dealer, I lost my parents in a political crisis here in my Country. That is the reason why I need your assistance for Investment, This might be a surprise to you about where I got your contact. I got your contact from the internet search for a reliable person after i fasted and prayed I decided to contact you. I am contacting you in other for you to help me with the transfer and investing of my inheritance in your country.
once i hear from you,i will give you details about the sum of Euro EUR 6,5 Million left for me by my late parents and how i will want you to assist me in investing it wisely in your country. I want you to know that I am willing to offer you 20% out of the total money for your Assistance for helping me regarding the transfer and investment there in your country.
Thanks and God bless.
Best regards
Becky
Envelope Sender: <francieli.caroline@posgrad.ufsc.br>
'From' Header: Becky Koulibaly <francieli.caroline@posgrad.ufsc.br>
Subject: [Spam] Dear friend
Timestamp: 01:22:51 CDT, Tuesday 29 October 2019
Message-ID: <01f5e966a189a681771a3b6f532baba0@posgrad.ufsc.br>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Bulk Medium
Client IP Address: 150.162.2.183
Client GeoIP Lookup: Brazil
Email Size: 5.3 kB
Encrypted? No
Contact for your ATM CARD
NOTE: Nope, nothing here you forgot about. This is a criminal using a free and anonymous email account to phish for information. This one hopes the reader is greedy enough to provide information that will allow them to start collecting benefits in your name. For the criminal behind this it will be a financial goldmine while they wrack up costs in your name. Don't respond to these jokers, ever.
From: Mrs Omabala Nancy <24hrs.service0003@gmail.com> To: undisclosed-recipients:;01:56:26 CDT, Tuesday 29 October 2019
Attachments: None
Message ID: <CAJC0xAKeQYOXERrQc9Hhv6vMVoWxQFu4xpdD9D=KxBKHFD1Z_w@mail.gmail.com>
Return Path: <24hrs.service0003@gmail.com>
Reply To: UBAGroupb@groupmail.com
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.66.42]) by pure.maildistiller.com with ESMTPS id 9010D140056 for < >; Tue, 29 Oct 2019 06:56:25 +0000 (UTC)
from mail-wm1-f66.google.com (mail-wm1-f66.google.com [209.85.128.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id 3DC25A40063 for < >; Tue, 29 Oct 2019 06:56:25 +0000 (UTC)
by mail-wm1-f66.google.com with SMTP id r141so1167335wme.4 for < >; Mon, 28 Oct 2019 23:56:25 -0700 (PDT)
by 2002:a7b:cb59:0:0:0:0:0 with HTTP; Mon, 28 Oct 2019 23:56:23 -0700 (PDT)
Attention How are you doing hoping all is well with you and your family? We know you might have forgotten about this your outstanding compensation payment due to delay on the delivery up till now. We are here by writing to inform you that your payment file was found in our Office and we discovered that your Compensation payment worth sum of two million seven hundred thousand United State Dollars {$2.700,000.00} have not been sent to you as it was instructed by The Economic Community of West African States(ECO-WAS) We are here to inform you that your payment has been converted into ATM Visa/Master Card to free it from Confiscating, and all necessary arrangement your ATM VISA/MASTER CARD Payment worth of {$2.700,000.00} has been granted for your payment through Our ATM Card Department Center. Now Your ATM Visa/Master Card is well packaged with every legal document to convey it not having any problem with anybody therefore we are here by inviting you to our office here in Benin, Office Address, Commented Bank, Cotonou Jean Paul 1BP 325,Benin Republic, to enable us complete the normal formalities and activation process of your ATM Visa Card and issue the Secret PIN CODE/NUMBER to enable you start using it at any ATM MACHINE worldwide of your choice nearest to you, as soon as it is activated, But if you are unable to come down here in our office in person you will be required to update our ATM Department Center with your contact delivery details as stated below so that they will precede with the necessary arrangement for the delivery your ATM VISA/MASTER CARD. 1. Your Full name, ________________ 2. Your home Address, _____________ 3. Your telephone number, _________ 4. A copy of your ID, _____________ Meanwhile you should contact OUR ATM CARD PAYMENT DEPARTMENT CENTER immediately on their below; E-mail: { ubaatmofficepayment@gmail.com } E-mail: { paymentoffce@post.com } Contact Person; Mr. Agbanabu Kalu Ezu Director Of United Bank For Africa (UBA) Telephone Number; +229-66400990 Try to call him immediately to know when your ATM VISA/MASTER CARD will be delivered to you. I am waiting for your update as soon as you have received your Visa/Master ATM Card. Thanks and God Bless You. Yours sincerely Mrs. Omabala Nancy
Envelope Sender: <24hrs.service0003@gmail.com>
'From' Header: Mrs Omabala Nancy <24hrs.service0003@gmail.com>
Subject: Contact for your ATM CARD
Timestamp: 01:56:26 CDT, Tuesday 29 October 2019
Message-ID: <CAJC0xAKeQYOXERrQc9Hhv6vMVoWxQFu4xpdD9D=KxBKHFD1Z_w@mail.gmail.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Client IP Address: 209.85.128.66
Client GeoIP Lookup: United States
Email Size: 5.1 kB
Encrypted? No
From: Mrs Omabala Nancy <24hrs.service0003@gmail.com> To: undisclosed-recipients:;01:56:26 CDT, Tuesday 29 October 2019
Attachments: None
Message ID: <CAJC0xAKeQYOXERrQc9Hhv6vMVoWxQFu4xpdD9D=KxBKHFD1Z_w@mail.gmail.com>
Return Path: <24hrs.service0003@gmail.com>
Reply To: UBAGroupb@groupmail.com
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.66.42]) by pure.maildistiller.com with ESMTPS id 9010D140056 for < >; Tue, 29 Oct 2019 06:56:25 +0000 (UTC)
from mail-wm1-f66.google.com (mail-wm1-f66.google.com [209.85.128.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id 3DC25A40063 for < >; Tue, 29 Oct 2019 06:56:25 +0000 (UTC)
by mail-wm1-f66.google.com with SMTP id r141so1167335wme.4 for < >; Mon, 28 Oct 2019 23:56:25 -0700 (PDT)
by 2002:a7b:cb59:0:0:0:0:0 with HTTP; Mon, 28 Oct 2019 23:56:23 -0700 (PDT)
Attention How are you doing hoping all is well with you and your family? We know you might have forgotten about this your outstanding compensation payment due to delay on the delivery up till now. We are here by writing to inform you that your payment file was found in our Office and we discovered that your Compensation payment worth sum of two million seven hundred thousand United State Dollars {$2.700,000.00} have not been sent to you as it was instructed by The Economic Community of West African States(ECO-WAS) We are here to inform you that your payment has been converted into ATM Visa/Master Card to free it from Confiscating, and all necessary arrangement your ATM VISA/MASTER CARD Payment worth of {$2.700,000.00} has been granted for your payment through Our ATM Card Department Center. Now Your ATM Visa/Master Card is well packaged with every legal document to convey it not having any problem with anybody therefore we are here by inviting you to our office here in Benin, Office Address, Commented Bank, Cotonou Jean Paul 1BP 325,Benin Republic, to enable us complete the normal formalities and activation process of your ATM Visa Card and issue the Secret PIN CODE/NUMBER to enable you start using it at any ATM MACHINE worldwide of your choice nearest to you, as soon as it is activated, But if you are unable to come down here in our office in person you will be required to update our ATM Department Center with your contact delivery details as stated below so that they will precede with the necessary arrangement for the delivery your ATM VISA/MASTER CARD. 1. Your Full name, ________________ 2. Your home Address, _____________ 3. Your telephone number, _________ 4. A copy of your ID, _____________ Meanwhile you should contact OUR ATM CARD PAYMENT DEPARTMENT CENTER immediately on their below; E-mail: { ubaatmofficepayment@gmail.com } E-mail: { paymentoffce@post.com } Contact Person; Mr. Agbanabu Kalu Ezu Director Of United Bank For Africa (UBA) Telephone Number; +229-66400990 Try to call him immediately to know when your ATM VISA/MASTER CARD will be delivered to you. I am waiting for your update as soon as you have received your Visa/Master ATM Card. Thanks and God Bless You. Yours sincerely Mrs. Omabala Nancy
Envelope Sender: <24hrs.service0003@gmail.com>
'From' Header: Mrs Omabala Nancy <24hrs.service0003@gmail.com>
Subject: Contact for your ATM CARD
Timestamp: 01:56:26 CDT, Tuesday 29 October 2019
Message-ID: <CAJC0xAKeQYOXERrQc9Hhv6vMVoWxQFu4xpdD9D=KxBKHFD1Z_w@mail.gmail.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Client IP Address: 209.85.128.66
Client GeoIP Lookup: United States
Email Size: 5.1 kB
Encrypted? No
Dear Owner,
NOTE: No one writing you from a free and anonymous email account who doesn't know your name is going to offer you riches. NOT EVER, NOT NOW. This IS a classic example of spam being sent to masses of people in the hopes some poor victim will cough up the information they will request so the criminal behind this can make money off your identity. Then destroy your credit and reputation. Don't bother with these a**es, they aren't worth the trouble it will cause you.
From: winner Official <winnerofficial1a@gmail.com> To: undisclosed-recipients:;03:27:07 CDT, Tuesday 29 October 2019
Attachments: None
Message ID: <CAFhYxgVw+KvdYsz3URBJ15FpdLuJmniqxr26efGMN_F7OoV=TQ@mail.gmail.com>
Return Path: <winnerofficial1a@gmail.com>
Reply To:
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us4.ppe-hosted.com (unknown [10.7.66.39]) by pure.maildistiller.com with ESMTPS id 2BEA91A004D for < >; Tue, 29 Oct 2019 08:27:07 +0000 (UTC)
from mail-io1-f68.google.com (mail-io1-f68.google.com [209.85.166.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id 0AD428005E for < >; Tue, 29 Oct 2019 08:27:07 +0000 (UTC)
by mail-io1-f68.google.com with SMTP id p6so13814443iod.7 for < >; Tue, 29 Oct 2019 01:27:07 -0700 (PDT)
by 2002:ac0:8885:0:0:0:0:0 with HTTP; Tue, 29 Oct 2019 01:27:05 -0700 (PDT)
Dear Owner, I am Mr. Robert Umar of Claims Department with a bank here in United States. I wish to notify you that you are clear to claim the total sum of Seven Million Five Hundred thousand British pounds in the codicil and last testament of a deceased customer (Name now withheld for security reasons). Kindly Contact me for more details email:officaa500@gmail.com Yours faithfully, Mr.Robert Umar + 661-527-5489
Envelope Sender: <winnerofficial1a@gmail.com>
'From' Header: winner Official <winnerofficial1a@gmail.com>
Subject: Dear Owner,
Timestamp: 03:27:07 CDT, Tuesday 29 October 2019
Message-ID: <CAFhYxgVw+KvdYsz3URBJ15FpdLuJmniqxr26efGMN_F7OoV=TQ@mail.gmail.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Client IP Address: 209.85.166.68
Client GeoIP Lookup: United States
Email Size: 3.1 kB
Encrypted? No
From: winner Official <winnerofficial1a@gmail.com> To: undisclosed-recipients:;03:27:07 CDT, Tuesday 29 October 2019
Attachments: None
Message ID: <CAFhYxgVw+KvdYsz3URBJ15FpdLuJmniqxr26efGMN_F7OoV=TQ@mail.gmail.com>
Return Path: <winnerofficial1a@gmail.com>
Reply To:
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Attachments:
None
Received:
from mx1-us4.ppe-hosted.com (unknown [10.7.66.39]) by pure.maildistiller.com with ESMTPS id 2BEA91A004D for < >; Tue, 29 Oct 2019 08:27:07 +0000 (UTC)
from mail-io1-f68.google.com (mail-io1-f68.google.com [209.85.166.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id 0AD428005E for < >; Tue, 29 Oct 2019 08:27:07 +0000 (UTC)
by mail-io1-f68.google.com with SMTP id p6so13814443iod.7 for < >; Tue, 29 Oct 2019 01:27:07 -0700 (PDT)
by 2002:ac0:8885:0:0:0:0:0 with HTTP; Tue, 29 Oct 2019 01:27:05 -0700 (PDT)
Dear Owner, I am Mr. Robert Umar of Claims Department with a bank here in United States. I wish to notify you that you are clear to claim the total sum of Seven Million Five Hundred thousand British pounds in the codicil and last testament of a deceased customer (Name now withheld for security reasons). Kindly Contact me for more details email:officaa500@gmail.com Yours faithfully, Mr.Robert Umar + 661-527-5489
Envelope Sender: <winnerofficial1a@gmail.com>
'From' Header: winner Official <winnerofficial1a@gmail.com>
Subject: Dear Owner,
Timestamp: 03:27:07 CDT, Tuesday 29 October 2019
Message-ID: <CAFhYxgVw+KvdYsz3URBJ15FpdLuJmniqxr26efGMN_F7OoV=TQ@mail.gmail.com>
Attachments: None
Classification: Spam
Threat Level: Medium
Confidence: Very High
Classification Breakdown:
TAGS CONFIDENCE
Spam Very High
Client IP Address: 209.85.166.68
Client GeoIP Lookup: United States
Email Size: 3.1 kB
Encrypted? No
Monday, October 28, 2019
Notification of Bequest!!!
NOTE: This crook really wants to get your attention!!!!! We have multiple email addresses here ... this one is a rookie. No matter, still a criminal out to steal from some sucker responding. Don't give them the pleasure or the information to decimate you.
From: Eric Hawks <eric.hawks19@crisgarden.ro> To: undisclosed-recipients:;09:22:04 CDT, Monday 28 October 2019
Attachments: None
Message ID: <1dc921d630cbc01b45cd40f394e48cf7@crisgarden.ro>
Return Path: <eric.hawks19@crisgarden.ro>
Reply To: eric.hawks19@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=US-ASCII; format=flowed
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.9]) by pure.maildistiller.com with ESMTPS id 948081E0053 for < >; Mon, 28 Oct 2019 14:22:03 +0000 (UTC)
from webmail.crisgarden.ro (mail.crisgarden.ro [37.156.71.236]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id 66B7D580064 for < >; Mon, 28 Oct 2019 14:22:03 +0000 (UTC)
from localhost (localhost.localdomain [127.0.0.1]) by webmail.crisgarden.ro (Postfix) with ESMTP id D78364213D2; Mon, 28 Oct 2019 16:18:08 +0200 (EET)
from webmail.crisgarden.ro ([127.0.0.1]) by localhost (mail.crisgarden.ro [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id HjPqSRYZqq86; Mon, 28 Oct 2019 16:17:53 +0200 (EET)
from webmail.crisgarden.ro (localhost [IPv6:::1]) by webmail.crisgarden.ro (Postfix) with ESMTP id E5C434213B1; Mon, 28 Oct 2019 16:16:48 +0200 (EET)
Notification of Bequest On behalf of the Trustees and Executor of the Estate of Late Scott Kennedy ,I hereby attempt to reach you again. I wish to notify you that late Scott Kennedy made you a beneficiary to his will. He left the sum of twenty three Million two Hundred Thousand Dollars to you in the codicil and last testament to his will.This may sound strange and unbelievable to you, but it is real and true. His great philanthropy earned him numerous awards during his life time, Late Scott Kennedy died at the age of 71 years.According to him this WILL is to support your activities and to help the poor and the needy. Please fill the information below for re-confirmation and more directives. 1.Full Name 2.Telephone number 3.Age 4.contact address/Country 5.occupation Yours in service, Eric Hawks(Esq.)
Envelope Sender: <eric.hawks19@crisgarden.ro>
'From' Header: Eric Hawks <eric.hawks19@crisgarden.ro>
Subject: Notification of Bequest!!!
Timestamp: 09:22:04 CDT, Monday 28 October 2019
Message-ID: <1dc921d630cbc01b45cd40f394e48cf7@crisgarden.ro>
Attachments: None
Client IP Address: 37.156.71.236
Client GeoIP Lookup: Romania
Email Size: 3.0 kB
Encrypted? No
From: Eric Hawks <eric.hawks19@crisgarden.ro> To: undisclosed-recipients:;09:22:04 CDT, Monday 28 October 2019
Attachments: None
Message ID: <1dc921d630cbc01b45cd40f394e48cf7@crisgarden.ro>
Return Path: <eric.hawks19@crisgarden.ro>
Reply To: eric.hawks19@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=US-ASCII; format=flowed
Attachments:
None
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.9]) by pure.maildistiller.com with ESMTPS id 948081E0053 for < >; Mon, 28 Oct 2019 14:22:03 +0000 (UTC)
from webmail.crisgarden.ro (mail.crisgarden.ro [37.156.71.236]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id 66B7D580064 for < >; Mon, 28 Oct 2019 14:22:03 +0000 (UTC)
from localhost (localhost.localdomain [127.0.0.1]) by webmail.crisgarden.ro (Postfix) with ESMTP id D78364213D2; Mon, 28 Oct 2019 16:18:08 +0200 (EET)
from webmail.crisgarden.ro ([127.0.0.1]) by localhost (mail.crisgarden.ro [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id HjPqSRYZqq86; Mon, 28 Oct 2019 16:17:53 +0200 (EET)
from webmail.crisgarden.ro (localhost [IPv6:::1]) by webmail.crisgarden.ro (Postfix) with ESMTP id E5C434213B1; Mon, 28 Oct 2019 16:16:48 +0200 (EET)
Notification of Bequest On behalf of the Trustees and Executor of the Estate of Late Scott Kennedy ,I hereby attempt to reach you again. I wish to notify you that late Scott Kennedy made you a beneficiary to his will. He left the sum of twenty three Million two Hundred Thousand Dollars to you in the codicil and last testament to his will.This may sound strange and unbelievable to you, but it is real and true. His great philanthropy earned him numerous awards during his life time, Late Scott Kennedy died at the age of 71 years.According to him this WILL is to support your activities and to help the poor and the needy. Please fill the information below for re-confirmation and more directives. 1.Full Name 2.Telephone number 3.Age 4.contact address/Country 5.occupation Yours in service, Eric Hawks(Esq.)
Envelope Sender: <eric.hawks19@crisgarden.ro>
'From' Header: Eric Hawks <eric.hawks19@crisgarden.ro>
Subject: Notification of Bequest!!!
Timestamp: 09:22:04 CDT, Monday 28 October 2019
Message-ID: <1dc921d630cbc01b45cd40f394e48cf7@crisgarden.ro>
Attachments: None
Client IP Address: 37.156.71.236
Client GeoIP Lookup: Romania
Email Size: 3.0 kB
Encrypted? No
Subscribe to:
Posts (Atom)