by SJHolt
Scammers have hijacked the EuroMillions winners Chris and Colin Weir.
This appears very legitimate and it toke me a long time to finely convince my father it is a scam which to my surprise he agreed.
The message body is basically this "You send us money, we send you money."
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 20 May 2013 05:03:23 +1200
Received: from ip1.tranzpeer.net ([192.168.69.1])
by mxdsrv2.tranzpeer.net with ESMTP (Exim 4.69)
id 1Ue711-0001ZU-Ds
for ; Mon, 20 May 2013 05:03:23 +1200
Received: from mentor.websitewelcome.com ([174.121.1.2])
by mx1.tranzpeer.net with ESMTP; 20 May 2013 05:03:00 +1200
Received: from [41.206.15.47] (port=30075 helo=[10.245.117.30])
by mentor.websitewelcome.com with esmtpa (Exim 4.80)
(envelope-from <[email protected]>)
id 1Ue6zY-0004fw-VJ
for ; Sun, 19 May 2013 12:02:59 -0500
Content-Type: multipart/mixed; boundary="===============1505985115=="
MIME-Version: 1.0
Subject: CONGRATULATIONS ON A SUCCESSFUL FUNDS TRANSFER?
To:
From: "NATWEST BANK" <[email protected]>
Date: Sun, 19 May 2013 18:01:36 +0100
Reply-To: [email protected]
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - mentor.websitewelcome.com
X-AntiAbuse: Original Domain - slingshot.co.nz
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nwsts.biz
X-BWhitelist: no
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: ([10.245.117.30]) [41.206.15.47]:30075
X-Source-Auth: [email protected]
X-Email-Count: 1
X-Source-Cap: ZG14Y29tO3Zpc3VhbDttZW50b3Iud2Vic2l0ZXdlbGNvbWUuY29t
X-Envelope-To:
This appears very legitimate and it toke me a long time to finely convince my father it is a scam which to my surprise he agreed.
The message body is basically this "You send us money, we send you money."
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 20 May 2013 05:03:23 +1200
Received: from ip1.tranzpeer.net ([192.168.69.1])
by mxdsrv2.tranzpeer.net with ESMTP (Exim 4.69)
id 1Ue711-0001ZU-Ds
for ; Mon, 20 May 2013 05:03:23 +1200
Received: from mentor.websitewelcome.com ([174.121.1.2])
by mx1.tranzpeer.net with ESMTP; 20 May 2013 05:03:00 +1200
Received: from [41.206.15.47] (port=30075 helo=[10.245.117.30])
by mentor.websitewelcome.com with esmtpa (Exim 4.80)
(envelope-from <[email protected]>)
id 1Ue6zY-0004fw-VJ
for ; Sun, 19 May 2013 12:02:59 -0500
Content-Type: multipart/mixed; boundary="===============1505985115=="
MIME-Version: 1.0
Subject: CONGRATULATIONS ON A SUCCESSFUL FUNDS TRANSFER?
To:
From: "NATWEST BANK" <[email protected]>
Date: Sun, 19 May 2013 18:01:36 +0100
Reply-To: [email protected]
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - mentor.websitewelcome.com
X-AntiAbuse: Original Domain - slingshot.co.nz
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nwsts.biz
X-BWhitelist: no
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: ([10.245.117.30]) [41.206.15.47]:30075
X-Source-Auth: [email protected]
X-Email-Count: 1
X-Source-Cap: ZG14Y29tO3Zpc3VhbDttZW50b3Iud2Vic2l0ZXdlbGNvbWUuY29t
X-Envelope-To:
