Subject: CONGRATULATIONS!
from: Wells Fargo Bank <[email protected]> (account name, atsushi onishi)
reply-to: Wells Fargo Bank <[email protected]>
Body of Email:
Good day.
This is to inform you that the U.S Government has instructed us to remit the sum of $1.2Million US dollar into your account, the reason for this is because your name was among the scam victims that lost a lot of money to African Fraudsters, you are hereby advised to without delay stop all you have going on between you and anybody on internet because you will end up at nothing, hence, there are two options to receive your funds.
(1) By Bank to Bank Wire Transfer
(2) By Atm Card.
We are waiting your immediate response with your information to enable this bank proceeds immediately with the transfer of your fund and serve you better.
Full Name....................
Home Address.................
Age/Occupation..............
Valid Phone number............
Your Country........
Any Of Your Identity Card........
Do not send money upfront fee to anyone from African again for what so ever reason. The Wells Fargo Bank will immediately remit your account once I reconfirm your banking details.
Congratulations.
Email: [email protected]
Mr.Chris Mathew
Executive Region Manager
Original Email info:
Message ID <[email protected]>
Created at: Tue, May 22, 2018 at 9:59 AM (Delivered after 1325 seconds)
From: Wells Fargo Bank <[email protected]>
To:
Subject: CONGRATULATIONS!
SPF: PASS with IP 153.149.236.38 Learn more
Header:
Delivered-To: XXXXX
Received: by 2002:a4a:19c3:0:0:0:0:0 with SMTP id 64-v6csp1667383ooy;
Tue, 22 May 2018 08:21:13 -0700 (PDT)
X-Google-Smtp-Source: AB8JxZonYnPMqvkHe/f/xAmrfyepmYomhTY10yTbwltFDPTU08b3tDNmRbhF41+auUt6LMZkWsq+
X-Received: by 2002:a62:a315:: with SMTP id s21-v6mr24809061pfe.168.1527002473092;
Tue, 22 May 2018 08:21:13 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1527002473; cv=none;
d=google.com; s=arc-20160816;
b=GgNF9UmJMTDxWg7t3PO8UbcDHy552OR6NCyXKYoNH9e9hYs7/KWXIaJ+RKgOTZUHTH
XS30tzs4m490LhSbdSw0dAgB6LDvZjB/GoieZOxgIe1ditQ9YezpykmWM4ztKP/i02DL
uCT9sWBzCM+eQQns2NNcwC7puppF729zh7Rpsc1oRpfd2dj3hPtdUUiWaUNNC4WRXkBB
4FHomd252EwrDdF2B/CVSKEcQORboCpWrBDbUBfdGkJ0XsXyy9RmTyj0V7mwIlWEEM/w
V/CjWTgcJva6DGl96ypSgcY2ni9iRq6uKGXWvDf+uxyj+MZqGGQEKtR4YpddsRLawkNf
x/GQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-transfer-encoding:mime-version:subject:message-id:reply-to
:from:date:arc-authentication-results;
bh=Q6q+R1+KVYfw04nTnuum+TSA5ptelZw/aVRIBjm0lQc=;
b=BHRY1c2bks51nZdQs3HGmORfoy3MJEmUZ7S5zdShRR/25jgFK1JlIVdabO2Gen+R3C
uYwg3c3m7yebZTeSpkNLe+hSrM6zE0g/U7/M2ycWh5Jct6CzdkgNuCMi6N/KiU8DbKx1
Rqw0JXzzrrPYKW26ZOV3YY1rrggUhQTRUsapKGo8x503A6XAreE817XIjjhl5O3XgWKJ
sJr33xFp6Hmc8lT95p1M/G0nz1q7QwKedVeiMN2xRECmc2YWow7to+bBmNCtBbVDusw9
vXMU2pmXXIuaMEK3I0D3MFX19281C+f5M85Y8bC7wLG+ln1cWtF2f5oKzJ+CO4IV8rG9
o7yA==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: domain of [email protected] designates 153.149.236.38 as permitted sender) [email protected]
Return-Path: <[email protected]>
Received: from mbkd0337.ocn.ad.jp (mbkd0337.ocn.ad.jp. [153.149.236.38])
by mx.google.com with ESMTP id n22-v6si16726176pfb.126.2018.05.22.08.21.01;
Tue, 22 May 2018 08:21:13 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 153.149.236.38 as permitted sender) client-ip=153.149.236.38;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 153.149.236.38 as permitted sender) [email protected]
Received: from mf-smf-ucb019c3 (mf-smf-ucb019c3.ocn.ad.jp [153.153.66.132]) by mbkd0337.ocn.ad.jp (Postfix) with ESMTP id B61D5110AD0E; Tue, 22 May 2018 23:59:09 +0900 (JST)
Received: from ntt.pod01.mv-mta-ucb023 ([153.149.142.86]) by mf-smf-ucb019c3 with ESMTP id L8kmfZhaAw9NQL8knf81IW; Tue, 22 May 2018 23:59:09 +0900
Received: from vcwebmail.ocn.ad.jp ([153.149.227.167]) by ntt.pod01.mv-mta-ucb023 with id pSz81x00Q3dLKTM01Sz8rb; Tue, 22 May 2018 14:59:09 +0000
Received: from mzkstore642.ocn.ad.jp (mz-ukg642p.ocn.ad.jp [118.23.107.226]) by vcwebmail.ocn.ad.jp (Postfix) with ESMTP; Tue, 22 May 2018 23:59:08 +0900 (JST)
Date: Tue, 22 May 2018 23:59:08 +0900 (JST)
From: Wells Fargo Bank <[email protected]>
Reply-To: Wells Fargo Bank <[email protected]>
Message-ID: <[email protected]>
Subject: CONGRATULATIONS!
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Originating-IP: [197.210.47.20]
from: Wells Fargo Bank <[email protected]> (account name, atsushi onishi)
reply-to: Wells Fargo Bank <[email protected]>
Body of Email:
Good day.
This is to inform you that the U.S Government has instructed us to remit the sum of $1.2Million US dollar into your account, the reason for this is because your name was among the scam victims that lost a lot of money to African Fraudsters, you are hereby advised to without delay stop all you have going on between you and anybody on internet because you will end up at nothing, hence, there are two options to receive your funds.
(1) By Bank to Bank Wire Transfer
(2) By Atm Card.
We are waiting your immediate response with your information to enable this bank proceeds immediately with the transfer of your fund and serve you better.
Full Name....................
Home Address.................
Age/Occupation..............
Valid Phone number............
Your Country........
Any Of Your Identity Card........
Do not send money upfront fee to anyone from African again for what so ever reason. The Wells Fargo Bank will immediately remit your account once I reconfirm your banking details.
Congratulations.
Email: [email protected]
Mr.Chris Mathew
Executive Region Manager
Original Email info:
Message ID <[email protected]>
Created at: Tue, May 22, 2018 at 9:59 AM (Delivered after 1325 seconds)
From: Wells Fargo Bank <[email protected]>
To:
Subject: CONGRATULATIONS!
SPF: PASS with IP 153.149.236.38 Learn more
Header:
Delivered-To: XXXXX
Received: by 2002:a4a:19c3:0:0:0:0:0 with SMTP id 64-v6csp1667383ooy;
Tue, 22 May 2018 08:21:13 -0700 (PDT)
X-Google-Smtp-Source: AB8JxZonYnPMqvkHe/f/xAmrfyepmYomhTY10yTbwltFDPTU08b3tDNmRbhF41+auUt6LMZkWsq+
X-Received: by 2002:a62:a315:: with SMTP id s21-v6mr24809061pfe.168.1527002473092;
Tue, 22 May 2018 08:21:13 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1527002473; cv=none;
d=google.com; s=arc-20160816;
b=GgNF9UmJMTDxWg7t3PO8UbcDHy552OR6NCyXKYoNH9e9hYs7/KWXIaJ+RKgOTZUHTH
XS30tzs4m490LhSbdSw0dAgB6LDvZjB/GoieZOxgIe1ditQ9YezpykmWM4ztKP/i02DL
uCT9sWBzCM+eQQns2NNcwC7puppF729zh7Rpsc1oRpfd2dj3hPtdUUiWaUNNC4WRXkBB
4FHomd252EwrDdF2B/CVSKEcQORboCpWrBDbUBfdGkJ0XsXyy9RmTyj0V7mwIlWEEM/w
V/CjWTgcJva6DGl96ypSgcY2ni9iRq6uKGXWvDf+uxyj+MZqGGQEKtR4YpddsRLawkNf
x/GQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-transfer-encoding:mime-version:subject:message-id:reply-to
:from:date:arc-authentication-results;
bh=Q6q+R1+KVYfw04nTnuum+TSA5ptelZw/aVRIBjm0lQc=;
b=BHRY1c2bks51nZdQs3HGmORfoy3MJEmUZ7S5zdShRR/25jgFK1JlIVdabO2Gen+R3C
uYwg3c3m7yebZTeSpkNLe+hSrM6zE0g/U7/M2ycWh5Jct6CzdkgNuCMi6N/KiU8DbKx1
Rqw0JXzzrrPYKW26ZOV3YY1rrggUhQTRUsapKGo8x503A6XAreE817XIjjhl5O3XgWKJ
sJr33xFp6Hmc8lT95p1M/G0nz1q7QwKedVeiMN2xRECmc2YWow7to+bBmNCtBbVDusw9
vXMU2pmXXIuaMEK3I0D3MFX19281C+f5M85Y8bC7wLG+ln1cWtF2f5oKzJ+CO4IV8rG9
o7yA==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: domain of [email protected] designates 153.149.236.38 as permitted sender) [email protected]
Return-Path: <[email protected]>
Received: from mbkd0337.ocn.ad.jp (mbkd0337.ocn.ad.jp. [153.149.236.38])
by mx.google.com with ESMTP id n22-v6si16726176pfb.126.2018.05.22.08.21.01;
Tue, 22 May 2018 08:21:13 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 153.149.236.38 as permitted sender) client-ip=153.149.236.38;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 153.149.236.38 as permitted sender) [email protected]
Received: from mf-smf-ucb019c3 (mf-smf-ucb019c3.ocn.ad.jp [153.153.66.132]) by mbkd0337.ocn.ad.jp (Postfix) with ESMTP id B61D5110AD0E; Tue, 22 May 2018 23:59:09 +0900 (JST)
Received: from ntt.pod01.mv-mta-ucb023 ([153.149.142.86]) by mf-smf-ucb019c3 with ESMTP id L8kmfZhaAw9NQL8knf81IW; Tue, 22 May 2018 23:59:09 +0900
Received: from vcwebmail.ocn.ad.jp ([153.149.227.167]) by ntt.pod01.mv-mta-ucb023 with id pSz81x00Q3dLKTM01Sz8rb; Tue, 22 May 2018 14:59:09 +0000
Received: from mzkstore642.ocn.ad.jp (mz-ukg642p.ocn.ad.jp [118.23.107.226]) by vcwebmail.ocn.ad.jp (Postfix) with ESMTP; Tue, 22 May 2018 23:59:08 +0900 (JST)
Date: Tue, 22 May 2018 23:59:08 +0900 (JST)
From: Wells Fargo Bank <[email protected]>
Reply-To: Wells Fargo Bank <[email protected]>
Message-ID: <[email protected]>
Subject: CONGRATULATIONS!
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Originating-IP: [197.210.47.20]