Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#263571 by Tim Atem Thu Aug 13, 2015 9:04 am
IP Address 41.138.167.156
Location Nigeria, Rivers, Port Harcourt
Connection through Visafone Communications Limited
Usage Type (ISP) Fixed Line ISP, (MOB) Mobile ISP


Delivered-To: <snipped>
Received: by 10.27.220.9 with SMTP id t9csp522089wlg;
Wed, 12 Aug 2015 17:56:51 -0700 (PDT)
X-Received: by 10.170.60.138 with SMTP id c132mr18453204ykc.47.1439427410982;
Wed, 12 Aug 2015 17:56:50 -0700 (PDT)
Return-Path: <[email protected]>
Received: from if10-mail-fb04-mia.mta.terra.com (if10-mail-fb04-mia.mta.terra.com. [98.142.233.71])
by mx.google.com with ESMTP id w203si316942ywa.60.2015.08.12.17.56.50
for <<snipped>>;
Wed, 12 Aug 2015 17:56:50 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 98.142.233.71 as permitted sender) client-ip=98.142.233.71;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.142.233.71 as permitted sender) [email protected]
Received: from mail-smtp03-mia.tpn.terra.com (unknown [10.235.200.60])
by mail-fb04-mia.tpn.terra.com (Postfix) with ESMTP id 360EF8018ACC
for <<snipped>>; Thu, 13 Aug 2015 00:56:50 +0000 (UTC)
X-Terra-Karma: -2%
X-Terra-Hash: f59c7f4477c223a1fee7857f52c26574
Received: from localhost (1ge.terra.com [208.84.242.165])
(authenticated user escribaniamilo!speedylm)
by mail-smtp03-mia.tpn.terra.com (Postfix) with ESMTPA id 1B209C0000FB
for <<snipped>>; Thu, 13 Aug 2015 00:56:50 +0000 (UTC)
reply-to: [email protected]
date: Thu, 13 Aug 15 00:56:50 +0000
message-id: <[email protected]>
to: <snipped>
X-Priority: 3
x-msmail-priority: normal
importance: normal
priority: normal
subject: Attention Owner Of The ATM CARD
x-origin: 41.138.167.156
from: "UBA BANK PLC (FUND TRANSFER UNIT)" <[email protected]>
content-type: text/html; charset=utf-8
content-transfer-encoding: QUOTED-PRINTABLE
mime-version: 1.0
X-CMAE-Score: 100


Attention Owner Of The ATM CARD.

I have registered Your ATM CARD of 3.5M USD with D H L Express Courier
Company with registration code of ( Shipment Code awb 33xzs). please
Contact with your delivery information such as, Your Name, Your Address and
Your Telephone Number: to below person.
Name Dr. Davis Williams
E-mail-( [email protected])
Office NUMBER:+23408143871243
I have paid for the Insurance & Delivery fee. The only fee you have to pay
is their Security fee $67 Please indicate the registration Number and ask
Him how to pay their Security fee of $105 so that you can pay it
immediately.

Best Regards,

From the Desk Of:Gloria Young .
Director ATM Department uba bank

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
Advertisement

#266987 by Tim Atem Wed Sep 09, 2015 7:46 am
Using the same email address [email protected]


Delivered-To: <snipped>
Received: by 10.114.180.225 with SMTP id dr1csp1500836ldc;
Mon, 7 Sep 2015 15:53:38 -0700 (PDT)
X-Received: by 10.68.248.102 with SMTP id yl6mr51544572pbc.66.1441666418544;
Mon, 07 Sep 2015 15:53:38 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-pa0-x242.google.com (mail-pa0-x242.google.com. [2607:f8b0:400e:c03::242])
by mx.google.com with ESMTPS id r3si1320149pap.0.2015.09.07.15.53.37
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 07 Sep 2015 15:53:38 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:400e:c03::242 as permitted sender) client-ip=2607:f8b0:400e:c03::242;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:400e:c03::242 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-pa0-x242.google.com with SMTP id y6so3778227par.1
for <<snipped>>; Mon, 07 Sep 2015 15:53:37 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.68.142.130 with SMTP id rw2mr50698077pbb.107.1441666417710;
Mon, 07 Sep 2015 15:53:37 -0700 (PDT)
Received: by 10.66.6.42 with HTTP; Mon, 7 Sep 2015 15:53:37 -0700 (PDT)
Date: Mon, 7 Sep 2015 15:53:37 -0700
Message-ID: <CAKUKLww6BWz7n3RHBPws6aysbwmU2GcE4pRhTdBQi_u7epbg4A@mail.gmail.com>
Subject: HERE IS THE PAYMENT INFORMATION MY DEAR
From: Customer Care <[email protected]>
To: <<snipped>>


My dear please i will like you to send it through western union with the Below Agent Name since the Account is a closed account try and send it today and get back to us okay.

RECEIVER’S NAME:. .JOHN OBE
COUNTRY:. . . . . . . . BENIN REPUBLIC
CITY:. . . . . . . . . . . . COTONOU
AMOUNT:. . . . . . . . . . . . . . . .$4,200
QUESTION:. . . . . . . . WHEN
ANSWER:. . . . . . .NOW
MTCN:. . . . . . . . . .?
Sender's NAME . . . .
SENDER'S ADDRESS. . .

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5

Who is online

Users browsing this forum: Clive Wire and 227 guests