Global Internet Network Award [email protected]

Header Analysis Quick Report
Originating IP: 197.234.219.52
Originating ISP: Spacetel Benin
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.39.129 with SMTP id n123csp488278ion;
Thu, 5 Nov 2015 04:36:07 -0800 (PST)
X-Received: by 10.31.52.73 with SMTP id b70mr6585071vka.45.1446726967500;
Thu, 05 Nov 2015 04:36:07 -0800 (PST)
Return-Path: <[email protected]>
Received: from 10ibl21ser04.datacenter.cha.cantv.net (10ibl21ser04.datacenter.cha.cantv.net. [200.11.173.10])
by mx.google.com with ESMTPS id g16si2041993vkc.8.2015.11.05.04.35.54
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 05 Nov 2015 04:36:07 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.10 as permitted sender) client-ip=200.11.173.10;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.10 as permitted sender) [email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-02.datacenter.cha.cantv.net (webmail-02.datacenter.cha.cantv.net [200.11.153.85])
(authenticated bits=0)
by 10ibl21ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id tA5CZmR7023282;
Thu, 5 Nov 2015 08:05:49 -0430
X-Matched-Lists: []
Received: from 197.234.219.52 ([197.234.219.52]) by webmail-02.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Thu, 5 Nov 2015 08:05:47 -0430 (VET)
Date: Thu, 5 Nov 2015 08:05:47 -0430 (VET)
From: johnbruma <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <917860005.2301755.1446726949011.JavaMail.gess@webmail-02.datacenter.cha.cantv.net>
Subject: Congratulations
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Cantv Webmail
X-Originating-IP: [197.234.219.52]

Attn :

Global Internet Network announces you as one of the 25 lucky winners in
the ongoing 12 Years Global Internet Network Award on the 25th August 2015

You are advice to contact Mr.john bruma the President, Of Global
Internet Network to enable
him direct you on how you will receive your wining price. Congratulations God bless you

Thanks
Mr.SERGIO MORRIS
Director

Same scam, using a new email address [email protected]

Header Analysis Quick Report
Originating IP: 41.138.90.69
Originating ISP: Etisalat Benin
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.39.129 with SMTP id n123csp611618ion;
Thu, 5 Nov 2015 08:14:48 -0800 (PST)
X-Received: by 10.31.131.83 with SMTP id f80mr7778791vkd.48.1446740086869;
Thu, 05 Nov 2015 08:14:46 -0800 (PST)
Return-Path: <[email protected]>
Received: from 10ibl20ser04.datacenter.cha.cantv.net (10ibl20ser04.datacenter.cha.cantv.net. [200.11.173.11])
by mx.google.com with ESMTPS id 74si5097524vkn.104.2015.11.05.08.14.29
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 05 Nov 2015 08:14:46 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) client-ip=200.11.173.11;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) [email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-05.datacenter.cha.cantv.net (webmail-05.datacenter.cha.cantv.net [200.11.153.88])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id tA5GENLA012948;
Thu, 5 Nov 2015 11:44:23 -0430
X-Matched-Lists: []
Received: from 41.138.90.69 ([41.138.90.69]) by webmail-05.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Thu, 5 Nov 2015 11:44:23 -0430 (VET)
Date: Thu, 5 Nov 2015 11:44:23 -0430 (VET)
From: MONEY GRAM AGENT <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <543312017.2309364.1446740063840.JavaMail.gess@webmail-05.datacenter.cha.cantv.net>
Subject: Congratulations
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.138.90.69]

Attn :

Global Internet Network announces you as one of the 25 lucky winners in
the ongoing 12 Years Global Internet Network Award on the 25th August 2015

You are advice to contact johnbruma francise the President, Of Global
Internet Network to enable
him direct you on how you will receive your wining price. Congratulations God bless you

Thanks
Mr.johnbruma francise
Director

The fake bank contact in this scam:

Mr. Aaron Badza
[email protected]
+229-68926091

Delivered-To: <snipped>
Received: by 10.27.132.212 with SMTP id g203csp225574wld;
Sat, 7 Nov 2015 04:32:43 -0800 (PST)
X-Received: by 10.194.78.109 with SMTP id a13mr20006595wjx.20.1446899563494;
Sat, 07 Nov 2015 04:32:43 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail-wi0-x241.google.com (mail-wi0-x241.google.com. [2a00:1450:400c:c05::241])
by mx.google.com with ESMTPS id pu5si6211851wjc.50.2015.11.07.04.32.43
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sat, 07 Nov 2015 04:32:43 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:400c:c05::241 as permitted sender) client-ip=2a00:1450:400c:c05::241;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:400c:c05::241 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-wi0-x241.google.com with SMTP id w14so7234323wim.1
for <<snipped>>; Sat, 07 Nov 2015 04:32:43 -0800 (PST)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.194.203.106 with SMTP id kp10mr20343685wjc.86.1446899563177;
Sat, 07 Nov 2015 04:32:43 -0800 (PST)
Received: by 10.28.181.5 with HTTP; Sat, 7 Nov 2015 04:32:43 -0800 (PST)
Date: Sat, 7 Nov 2015 12:32:43 +0000
Message-ID: <CAOW0sDbJ6FUvE-Jdb0mG7mWP7XXNz8tKse_f31OAQbHVoi0=OQ@mail.gmail.com>
Subject: CONTACT THE PAYING BANK.
From: johnbruma francise <[email protected]>
To: <<snipped>>

Award winner 2015

I read your mail and everything is well
understood, I want to explain to you that your email address is one of
the lucky winner of Global Internet Network that is what the message
is talking about, also many other lucky winner have already received
their own money so you are advice to contact the uba paying bank with
bellow information for more details on how you will receive your own
Award.

I will instruct you to contact the bank and let them know that it is
our office that asked you to contact them for the transfer of the
fund that you won, and once again while contacting them let them know
that you won the sum of $2,500,000.00 that they should let you know
how and what you will do for them to transfer the fund to your
country.

Your fund was deposited at the bank, for more information’s please do
get back to me as I am here to help you and make sure that you secure
your fund that you won, Good luck once again.

Here are the full information’s of the paying bank
Bank name: UBA BANK Due Benin
Contact manager: Mr.Aaron Badza
Email:( [email protected] )
Bank telephone number;; +229 68926091
Contact the bank and get back to us
Thanks
Mr.SERGIO MORRIS
Director

[AlanJones]

From: MONEY GRAM AGENT - [email protected]
Reply-to: [email protected]
Tel. No.: +22998185502

Your first payment of $7000 was send today,

We have deposited the check of your fund (4.700,000,00USD) through Money Gram after our finally meeting regarding your fund, All you will do is to contact Money Gram director Mr John David Mark via E- [email protected] He will give you more direction on how you will be receiving the funds daily. Remember to send him your Full information to avoid wrong transfer such as: Receiver's Name____ Address: ___ Country: ____ Phone Number: ___ I.D Card:___ Though Mrs. Susan Kent has sent $7000 in your name today So contact their Director Mr John David Mark as soon as you receive this email or call him +229 98185502 tell him to give you the Mtcn, to pick the $7000 Please let us know as soon as you received all your fund,

Best regard MONEY GRAM AGENT

Header Analysis Quick Report
Originating IP: 41.138.89.39
Originating ISP: Etisalat Benin
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.39.129 with SMTP id n123csp673131ion;
Sun, 8 Nov 2015 05:41:01 -0800 (PST)
X-Received: by 10.31.170.151 with SMTP id t145mr22702781vke.31.1446990061825;
Sun, 08 Nov 2015 05:41:01 -0800 (PST)
Return-Path: <[email protected]>
Received: from 10ibl20ser04.datacenter.cha.cantv.net (10ibl20ser04.datacenter.cha.cantv.net. [200.11.173.11])
by mx.google.com with ESMTPS id 81si2095110vki.77.2015.11.08.05.40.48
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 08 Nov 2015 05:41:01 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) client-ip=200.11.173.11;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) [email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-02.datacenter.cha.cantv.net (webmail-02.datacenter.cha.cantv.net [200.11.153.85])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id tA8Dege8004278;
Sun, 8 Nov 2015 09:10:43 -0430
X-Matched-Lists: []
Received: from 41.138.89.39 ([41.138.89.39]) by webmail-02.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Sun, 8 Nov 2015 09:10:42 -0430 (VET)
Date: Sun, 8 Nov 2015 09:10:42 -0430 (VET)
From: johnbruma francise <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <117642984.2432058.1446990043079.JavaMail.gess@webmail-02.datacenter.cha.cantv.net>
Subject: Global Internet Network
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.138.89.39]

Attn :

Global Internet Network announces you as one of the 25 lucky winners in
the ongoing 12 Years Global Internet Network Award on the 5th March 2015
you are directed to the office of the Global Internet Network(G.I.N) to direct you
on how you will receive your wining price. Congratulations remain bless

Thanks
Mr.johnbruma francise
Director.

From the fake bank in this scam:

Delivered-To: <snipped>
Received: by 10.27.132.212 with SMTP id g203csp1040868wld;
Mon, 9 Nov 2015 01:07:07 -0800 (PST)
X-Received: by 10.194.23.33 with SMTP id j1mr32734799wjf.4.1447060027574;
Mon, 09 Nov 2015 01:07:07 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm11-vm8.bullet.mail.ir2.yahoo.com (nm11-vm8.bullet.mail.ir2.yahoo.com. [212.82.96.169])
by mx.google.com with ESMTPS id l69si15474351wmb.75.2015.11.09.01.07.07
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Mon, 09 Nov 2015 01:07:07 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 212.82.96.169 as permitted sender) client-ip=212.82.96.169;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 212.82.96.169 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.fr
DKIM-Signature: <snipped>
Received: from [212.82.98.60] by nm11.bullet.mail.ir2.yahoo.com with NNFMP; 09 Nov 2015 09:07:06 -0000
Received: from [212.82.98.73] by tm13.bullet.mail.ir2.yahoo.com with NNFMP; 09 Nov 2015 09:07:06 -0000
Received: from [127.0.0.1] by omp1010.mail.ir2.yahoo.com with NNFMP; 09 Nov 2015 09:07:06 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 212.82.98.121; Mon, 09 Nov 2015 09:07:05 +0000
Date: Mon, 9 Nov 2015 09:07:04 +0000 (UTC)
From: United Bank Of Africa Du Benin <[email protected]>
Reply-To: United Bank Of Africa Du Benin <[email protected]>
To: <<snipped>>
Message-ID: <[email protected]>
Subject: FROM UBA BANK.
MIME-Version: 1.0

you are not the only lucky winner of the Globally Network Internet Award because many have received there own from our bank. All you need to do is to follow our instruction so that you will receive your own as other did.

This is to officially inform you that our Paying Bank have received your mail regarding your wining prize award $2.5 MILLION and we are preparing on how you will receive your wining prize Award in your country without any delay, Again we advice you to make a choice on how you want to receive your wining prize $2.5 MILLION. Because you have two option and you will make one of your choice.(No1 option) is by Bank To Bank Transfer in to your Bank account. Then, (No 2) option is by ATM VISA CARD so kindly open the attachment file and fill the form then return it back to us as soon as possible, your immediate action towards this will be highly appreciated

Regards
Mr. Aaron,
The Bank Manager
+229-68926091

From the fake bank:

Delivered-To: <snipped>
Received: by 10.27.132.212 with SMTP id g203csp2404857wld;
Wed, 11 Nov 2015 07:01:30 -0800 (PST)
X-Received: by 10.194.173.100 with SMTP id bj4mr10286824wjc.95.1447254089951;
Wed, 11 Nov 2015 07:01:29 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm35-vm9.bullet.mail.ir2.yahoo.com (nm35-vm9.bullet.mail.ir2.yahoo.com. [212.82.97.132])
by mx.google.com with ESMTPS id gd4si12154898wjb.2.2015.11.11.07.01.29
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Wed, 11 Nov 2015 07:01:29 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 212.82.97.132 as permitted sender) client-ip=212.82.97.132;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 212.82.97.132 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.fr
DKIM-Signature: <snipped>
Received: from [212.82.98.50] by nm35.bullet.mail.ir2.yahoo.com with NNFMP; 11 Nov 2015 15:01:29 -0000
Received: from [212.82.98.67] by tm3.bullet.mail.ir2.yahoo.com with NNFMP; 11 Nov 2015 15:01:28 -0000
Received: from [127.0.0.1] by omp1004.mail.ir2.yahoo.com with NNFMP; 11 Nov 2015 15:01:28 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 217.12.9.9; Wed, 11 Nov 2015 15:01:28 +0000
Date: Wed, 11 Nov 2015 15:01:27 +0000 (UTC)
From: United Bank Of Africa Du Benin <[email protected]>
Reply-To: United Bank Of Africa Du Benin <[email protected]>
To: <<snipped>>
Message-ID: <[email protected]>
Subject: PAYMENT INSTRUCTION FROM UBA BANK.
MIME-Version: 1.0

PAYMENT INSTRUCTION
Attn.
This is to inform you that we have received your bank account details and this has confirmed you as the rightful receiving beneficiary of the Wining Prize Fund. Also Attach file is a copy of Your Wining Prize Certificate.
All are certified real with your account details.
Therefore we will transfer your prize into your bank account subject to your final co-operation.
We wish to inform you that all winners must pay the bank transfer charges of the award.
We will transfer your money into your bank account by (Swift Transfer)
This is an Electronics Means of Transfer and it attracts a Transfer Processing Fee of $499 only
It is rapid, safe and you must allow three Banking Days to receive your Two MILLION FIVE HUNDRED THOUSAND UNITED STATES DOLLAR ready in your nominated bank account.
We demand that you pay the bank transfer fee immediately through our payment method below.
Note that you have only 72 official banking working days to finalize and get your money into your account.
PAYMENT METHOD.

Western union or Money Gram

Make your payment to our Manager Treasury department, BENNAVIS ANYANWU
Name of receiver---- BENNAVIS ANYANWU
Country ---- Benin Republic
City---- Cotonou
Text question-------White
Answer------White.
MTCN--------?
Name of Sender------?
For any and all urgent clarification Kindly contact us immediately

Regards.
Mr. Aaron

Delivered-To: <snipped>
Received: by 10.27.131.86 with SMTP id f83csp88733wld;
Fri, 27 Nov 2015 11:32:16 -0800 (PST)
X-Received: by 10.194.90.243 with SMTP id bz19mr54025350wjb.128.1448652736053;
Fri, 27 Nov 2015 11:32:16 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm16-vm8.bullet.mail.ir2.yahoo.com (nm16-vm8.bullet.mail.ir2.yahoo.com. [212.82.96.214])
by mx.google.com with ESMTPS id i14si12423296wmf.113.2015.11.27.11.32.15
for <<snipped>>
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 27 Nov 2015 11:32:16 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 212.82.96.214 as permitted sender) client-ip=212.82.96.214;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 212.82.96.214 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.fr
DKIM-Signature: <snipped>
Received: from [212.82.98.51] by nm16.bullet.mail.ir2.yahoo.com with NNFMP; 27 Nov 2015 19:32:04 -0000
Received: from [212.82.98.107] by tm4.bullet.mail.ir2.yahoo.com with NNFMP; 27 Nov 2015 19:32:04 -0000
Received: from [127.0.0.1] by omp1044.mail.ir2.yahoo.com with NNFMP; 27 Nov 2015 19:32:04 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 217.12.9.11; Fri, 27 Nov 2015 19:32:04 +0000
Date: Fri, 27 Nov 2015 19:32:03 +0000 (UTC)
From: United Bank Of Africa Du Benin <[email protected]>
Reply-To: United Bank Of Africa Du Benin <[email protected]>
To: <<snipped>>
Message-ID: <[email protected]>
Subject: Re: FROM UBA BANK.
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <1251598892.19215552.1448652723705.JavaMail.yahoo.ref@mail.yahoo.com>
Content-Length: 530

You can send the Money with bellow account, and when you make the payment kindly send us the payment Slip. As soon as our bank receives the money from you we will transfer your wining prize award direct to your bank account.

BANK NAME: UBA BANK
ACCOUNT NAME: ANYANWU BENNAVIS
BANK ACCOUNT NUMBER: 51350000XXXX
CODE IBAN: BJ 0670151351350000676787
BANK SWIFT CODE/BIC: COBB BJBJ
BANK ADDRESS: COTONOU PATTE DOIE

We wait for the payment Slip as soon as you send the Money.

Regards.
Mr. Aaron

Same email address in the reply-to: [email protected]

Header Analysis Quick Report
Originating IP: 41.138.89.214
Originating ISP: Etisalat Benin
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.27.171.138 with SMTP id u132csp1628301wle;
Tue, 15 Dec 2015 14:16:45 -0800 (PST)
X-Received: by 10.129.99.195 with SMTP id x186mr25047491ywb.345.1450217805086;
Tue, 15 Dec 2015 14:16:45 -0800 (PST)
Return-Path: <[email protected]>
Received: from if10-mail-fb09-mia.mta.terra.com (if10-mail-fb09-mia.mta.terra.com. [98.142.233.76])
by mx.google.com with ESMTP id f124si2345172ywa.147.2015.12.15.14.16.40;
Tue, 15 Dec 2015 14:16:45 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 98.142.233.76 as permitted sender) client-ip=98.142.233.76;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 98.142.233.76 as permitted sender) [email protected]
Received: from mail-smtp14-mia.tpn.terra.com (unknown [10.235.200.53])
by mail-fb09-mia.tpn.terra.com (Postfix) with ESMTP id E3EA58006EA1;
Tue, 15 Dec 2015 22:16:39 +0000 (UTC)
X-Terra-Karma: -2%
X-Terra-Hash: 3d05cdccd6b2b474c740d3dfabcbdd2f
Received: from localhost (1n1.terra.com [208.84.242.167])
(authenticated user silviavaldivia!speedylm)
by mail-smtp14-mia.tpn.terra.com (Postfix) with ESMTPA id 70109C001117;
Tue, 15 Dec 2015 22:16:39 +0000 (UTC)
reply-to: [email protected]
date: Tue, 15 Dec 15 22:16:39 +0000
message-id: <[email protected]>
X-Priority: 3
x-msmail-priority: normal
importance: normal
priority: normal
subject: G.I.N.AWARD WINNER
x-origin: 41.138.89.214
from: johnbruma francise <[email protected]>
content-type: text/html; charset=utf-8
content-transfer-encoding: QUOTED-PRINTABLE
mime-version: 1.0
to:
X-CMAE-Score: 0

Dear

A message reaching our office (G.I.N) from our paying BANK
( [email protected] ) says that you have not claim your G.I.N.AWARD 2015,You are advice to contact the bank for your
fund

NOTE this is for only 25 lucky email login into internet Google for a year and also for your advice the Global Internet Network are given out the total sum of $62.5 million for the G.I.N AWARD WINNERS for annually, which goes for $2.5 each for all 25 lucky winner.

Bear in mind that billions of people or email login into internet in a day so kindly contact the BANK and claim you’re FUND for your more information

The G.I.N will be having seminar for all the 25 lucky winners in London by the middle of nest year 2016 for there final congratulations, after the official final meeting that will hold in France were the date and venue of the seminar will be discus,after that message will send to you across your email

Thanks
Mr.Johnbruma Francise

Same scam using a new email address in the reply-to: [email protected]

Header Analysis Quick Report
Originating IP: 197.210.224.115
Originating ISP: Mtn Nigeria Communication Limited
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.27.171.85 with SMTP id u82csp536369wle;
Thu, 7 Jan 2016 07:10:18 -0800 (PST)
X-Received: by 10.28.227.67 with SMTP id a64mr17040480wmh.74.1452179417610;
Thu, 07 Jan 2016 07:10:17 -0800 (PST)
Return-Path: <[email protected]>
Received: from if05-mail-fb01-mia.mta.terra.com (if05-mail-fb01-mia.mta.terra.com. [208.84.243.185])
by mx.google.com with ESMTP id y133si20371460wmb.56.2016.01.07.07.10.16;
Thu, 07 Jan 2016 07:10:17 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 208.84.243.185 as permitted sender) client-ip=208.84.243.185;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 208.84.243.185 as permitted sender) [email protected]
Received: from mail-smtp15-mia.tpn.terra.com (unknown [10.235.200.54])
by mail-fb01-mia.tpn.terra.com (Postfix) with ESMTP id 0940580102CD;
Thu, 7 Jan 2016 15:10:14 +0000 (UTC)
X-Terra-Karma: -2%
X-Terra-Hash: 7aba25b8ebd8ca2e90888e03eb176054
Received: from localhost (25p.terra.com [208.84.242.168])
(authenticated user cerabonag!speedylm)
by mail-smtp15-mia.tpn.terra.com (Postfix) with ESMTPA id 42244C00009E;
Thu, 7 Jan 2016 15:10:13 +0000 (UTC)
reply-to: [email protected]
date: Thu, 07 Jan 16 15:10:13 +0000
message-id: <[email protected]>
X-Priority: 3
x-msmail-priority: normal
importance: normal
priority: normal
subject: G.I.N.AWARD WINNER
x-origin: 197.210.224.115
from: johnbruma francise <[email protected]>
content-type: text/html; charset=utf-8
content-transfer-encoding: QUOTED-PRINTABLE
mime-version: 1.0
to:
X-CMAE-Score: 0

Dear
a message reaching our office (G.I.N) from our paying BANK ( [email protected] ) says that you have not claim your G.I.N.AWARD 2015,You are advice to contact the bank for your fund
NOTE this is for only 25 lucky email login into internet Google for a year and also for your advice the Global Internet Network are given out the total sum of $62.5 million for the G.I.N AWARD WINNERS for annually, which goes for $2.5 each for all 25 lucky winner.
Bear in mind that billions of people or email login into internet in a day so kindly contact the BANK and claim you’re FUND for your more information
The G.I.N will be having seminar for all the 25 lucky winners in London by the middle of this year 2016 for there final congratulations, after the official final meeting that will hold in France were the date and venue of the seminar will be discus, so message will send to you across your email
Thanks
Mr.Johnbruma Francise

Header Analysis Quick Report
Originating IP: 109.188.78.82
Originating ISP: Pjsc Megafon
City: Moscow
Country of Origin: Russian Federation
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.27.171.85 with SMTP id u82csp73328wle;
Thu, 14 Jan 2016 13:24:33 -0800 (PST)
X-Received: by 10.112.184.133 with SMTP id eu5mr1571064lbc.99.1452806673923;
Thu, 14 Jan 2016 13:24:33 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.drfalkpharma.net (mail.drfalkpharma.net. [109.188.78.82])
by mx.google.com with ESMTP id a13si4069095lfb.197.2016.01.14.13.24.25;
Thu, 14 Jan 2016 13:24:33 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 109.188.78.82 as permitted sender) client-ip=109.188.78.82;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 109.188.78.82 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from mail.drfalkpharma.net (localhost [127.0.0.1])
by mail.drfalkpharma.net (Postfix) with ESMTP id 619B354D230;
Fri, 15 Jan 2016 01:20:01 +0400 (GET)
Received: (from www@localhost)
by mail.drfalkpharma.net (8.14.3/8.14.3/Submit) id u0ELK0hu013098;
Fri, 15 Jan 2016 01:20:00 +0400 (GET)
(envelope-from [email protected])
X-Authentication-Warning: mail.drfalkpharma.net: www set sender to [email protected] using -f
To: <[email protected]>
Subject: THE CERTIFICATE OF PROOF (C.O.P.2015)AWARD WINNER
MIME-Version: 1.0
Date: Fri, 15 Jan 2016 01:20:00 +0400
From: "Barr. kelvin KLOSE" <[email protected]>
Reply-To: [email protected]
Message-ID: <d4854fb0b174abb0108a82fd559a90bc@localhost>
X-Sender: [email protected]
User-Agent: RoundCube Webmail/0.2.1

Dear

The information reaching our office G.I.N that you have not recieve your winning prize 2015 award programm
for your notice this programm is for 25 lucky winner annually as you are one of the lucky winner i still dont know the reason while you dont want to contact the bank for your prize

Here are the full information’s of the paying bank
Bank name: UBA BANK Due Benin
Contact manager: Mr. Aaron Badza
Email [email protected] )
Bank telephone number: +229 68926091
Contact the bank and get back to us


NOTE AS SOON YOU RECIEVE YOUR FUND REPIY BACK TO OUR OFFICE G.I.N FOR YOUR FINNAL SIGNATURE AND TWO PASSPORT PHOTOGRAPH TO PROOF THAT YOU HAVE RECIEVE YOUR FUND,ALL MOST ALL THE LUCKY WINNERS HAVE SIGNED THE CERTIFICATE OF PROOF (C.O.P.2015)REMAINING YOU WE NEED YOUR URGENT REPLY

Thanks
Mr.Johnbruma Francis