Mr. Scott Davids [email protected]

Header Analysis Quick Report
Originating IP: 197.211.53.6
Originating ISP: Globacom Ltd
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.143.18 with SMTP id r18csp155298iod;
Thu, 6 Aug 2015 21:37:40 -0700 (PDT)
X-Received: by 10.180.78.136 with SMTP id b8mr2095989wix.44.1438922260850;
Thu, 06 Aug 2015 21:37:40 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail.univ-ouargla.dz (mail.univ-ouargla.dz. [193.194.92.3])
by mx.google.com with SMTP id xa3si17361448wjc.106.2015.08.06.21.37.18;
Thu, 06 Aug 2015 21:37:40 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 193.194.92.3 as permitted sender) client-ip=193.194.92.3;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of [email protected] designates 193.194.92.3 as permitted sender) [email protected]
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.univ-ouargla.dz (Postfix) with ESMTP id 0750F150200D;
Fri, 7 Aug 2015 06:27:15 +0100 (CET)
Received: from mail.univ-ouargla.dz ([127.0.0.1])
by localhost (mail.univ-ouargla.dz [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id TxA0OemUgtD7; Fri, 7 Aug 2015 06:27:14 +0100 (CET)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.univ-ouargla.dz (Postfix) with ESMTP id 6CED0150201E;
Fri, 7 Aug 2015 06:27:14 +0100 (CET)
X-Virus-Scanned: amavisd-new at univ-ouargla.dz
Received: from mail.univ-ouargla.dz ([127.0.0.1])
by localhost (mail.univ-ouargla.dz [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id QCvdsNY3lbTh; Fri, 7 Aug 2015 06:27:14 +0100 (CET)
Received: from [10.178.163.205] (unknown [197.211.53.6])
by mail.univ-ouargla.dz (Postfix) with ESMTPSA id BAFCD1502012;
Fri, 7 Aug 2015 06:26:39 +0100 (CET)
Content-Type: multipart/alternative; boundary="===============1597661875=="
MIME-Version: 1.0
Subject: REPLY URGENTLY!!!
To: Recipients <[email protected]>
From: Mrs. Angela Hunt <[email protected]>
Date: Thu, 06 Aug 2015 21:36:38 -0700
Reply-To: [email protected]
X-Antivirus: avast! (VPS 150806-2, 08/06/2015), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>

A financial Donation has been awarded to you. For details contact: Name:Mr. Scott Davids Email: [email protected] Thanks Mrs. Angela Hunt

Avast logo
This email has been checked for viruses by Avast antivirus software.
http://www.avast.com

It's turned in to a UK lottery scam now:

Delivered-To: <snipped>
Received: by 10.27.220.9 with SMTP id t9csp789708wlg;
Tue, 11 Aug 2015 15:49:06 -0700 (PDT)
X-Received: by 10.66.65.138 with SMTP id x10mr61071706pas.61.1439333345957;
Tue, 11 Aug 2015 15:49:05 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm41-vm10.bullet.mail.gq1.yahoo.com (nm41-vm10.bullet.mail.gq1.yahoo.com. [67.195.87.149])
by mx.google.com with ESMTPS id pg9si6075034pbc.2.2015.08.11.15.49.05
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Tue, 11 Aug 2015 15:49:05 -0700 (PDT)
Received-SPF: neutral (google.com: 67.195.87.149 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=67.195.87.149;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 67.195.87.149 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.co.uk
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm41.bullet.mail.gq1.yahoo.com with NNFMP; 11 Aug 2015 22:49:05 -0000
Received: from [98.137.12.55] by nm41.bullet.mail.gq1.yahoo.com with NNFMP; 11 Aug 2015 22:46:04 -0000
Received: from [212.82.98.63] by tm15.bullet.mail.gq1.yahoo.com with NNFMP; 11 Aug 2015 22:46:04 -0000
Received: from [212.82.98.69] by tm16.bullet.mail.ir2.yahoo.com with NNFMP; 11 Aug 2015 22:46:03 -0000
Received: from [127.0.0.1] by omp1006.mail.ir2.yahoo.com with NNFMP; 11 Aug 2015 22:46:03 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 212.82.98.117; Tue, 11 Aug 2015 22:46:03 +0000
Date: Tue, 11 Aug 2015 22:46:03 +0000 (UTC)
From: FIDUCIARY AGENT <[email protected]>
Reply-To: FIDUCIARY AGENT <[email protected]>
To: <<snipped>>
Message-ID: <[email protected]>
Subject: Re: REPLY URGENTLY!!!
MIME-Version: 1.0

UK NATIONAL LOTTERY is giving out a weekly bonus to 4 lucky recipient, your email has won you this prize, the award is selected ramdomly from all internet subscribers.

We happily announce to you the draw (#966) of the UK NATIONAL LOTTERY, online Sweepstakes International program held on 4th August, 2015. Your e-mail address attached to ticket number: 5647560054 188 with Serial number 5368/15 jack pot lotto winners drew the lucky numbers:(-15-06-21-34-35-49-(46-)
"bonus no 46. which subsequently won"you the lottery in the 2nd category,
You have therefore been approved to claim a total sum of £12,000,000.00 (Twelve million pound sterling) in cash credited to file KTU/9023118308/03.
(three million eight hundred thousand pounds sterlings) lotto jackpot shared amongst the first four (4) lucky winners in this category. All participants for the online version were selected randomly from World Wide Web sites through computer draw system and extracted from over 100,000 unions, associations, and corporate bodies that are listed online.


This promotion takes place weekly. Please note that your lucky winning number falls within our London booklet representative office in London as indicated in your play coupon. In view of this, your £12,000,000.00 (Twelve million pound sterling) will be released to you by any of our payment offices in London.
For security reasons, you are advised to keep your winning information confidential till your claims is processed and your money remitted to you in whatever manner you deem fit to claim your prize. This is part! of our precautionary measure to avoid double claiming and unwarranted abuse of this program. Please be warned.

CONGRATULATIONS from me and members of the UK NATIONAL LOTTERY.
Yours faithfully,

Delivered-To: <snipped>
Received: by 10.140.33.55 with SMTP id i52csp1137406qgi;
Sun, 16 Aug 2015 09:44:47 -0700 (PDT)
X-Received: by 10.70.43.79 with SMTP id u15mr100048875pdl.84.1439743486753;
Sun, 16 Aug 2015 09:44:46 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm33-vm6.bullet.mail.gq1.yahoo.com (nm33-vm6.bullet.mail.gq1.yahoo.com. [98.136.216.245])
by mx.google.com with ESMTPS id bx2si20374621pab.141.2015.08.16.09.44.46
for <<snipped>>
(version=TLS1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Sun, 16 Aug 2015 09:44:46 -0700 (PDT)
Received-SPF: neutral (google.com: 98.136.216.245 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=98.136.216.245;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 98.136.216.245 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.co.uk
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm33.bullet.mail.gq1.yahoo.com with NNFMP; 16 Aug 2015 16:44:45 -0000
Received: from [98.137.12.188] by nm33.bullet.mail.gq1.yahoo.com with NNFMP; 16 Aug 2015 16:42:04 -0000
Received: from [212.82.98.59] by tm9.bullet.mail.gq1.yahoo.com with NNFMP; 16 Aug 2015 16:42:03 -0000
Received: from [212.82.98.101] by tm12.bullet.mail.ir2.yahoo.com with NNFMP; 16 Aug 2015 16:42:03 -0000
Received: from [127.0.0.1] by omp1038.mail.ir2.yahoo.com with NNFMP; 16 Aug 2015 16:42:03 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 217.12.9.15; Sun, 16 Aug 2015 16:42:02 +0000
Date: Sun, 16 Aug 2015 16:42:01 +0000 (UTC)
From: FIDUCIARY AGENT <[email protected]>
Reply-To: FIDUCIARY AGENT <[email protected]>
To: "<snipped>" <<snipped>>
Message-ID: <[email protected]>
Subject: CONTACT DISPATCH OFFICER
MIME-Version: 1.0

Inline image

ATTENTION:

CONGRATULATIONS!This is to inform you that you have been cleared a winner of the UK ONLINE LOTTERY online Sweepstakes International program. I am happy to inform you that i have forwarded your Original Certificate and your Certified bank cheque to the courier company.
Find below the details of the courier company.

FASTWAY COURIER SERVICES LTD
ADDRESS OF HEAD OFFICE:Link House, Link Place, BRIGHTON, Sussex, BN1 7DX, ENGLAND.
NAME:MR Billy Parker (Dispatch Officer)
EMAIL: [email protected]

TEL:+447045716888
TEL:+447087644923
TEL:+447031842739

You are adviced to send the courier company a mail to their email address for their courier cost. When contacting them,you are to include this order number SD52628 as your subject. Please you are adviced to write down the order number and save it.

ORDER NUMBER:SD52628

Note: you are to Quote your complete names,address,Ref/Batch Numbers and your direct phone number so that they can honour your letter. Once again i say congratulations and always inform me with your dealings with the courier company.

Thanks,

Mr.Scott Davids,
Fiduciary Agent,
UK ONLINE LOTTERY.

Delivered-To: <snipped>
Received: by 10.64.107.200 with SMTP id he8csp1789241ieb;
Mon, 17 Aug 2015 20:45:39 -0700 (PDT)
X-Received: by 10.180.91.107 with SMTP id cd11mr37588071wib.51.1439869538616;
Mon, 17 Aug 2015 20:45:38 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm25-vm2.bullet.mail.ir2.yahoo.com (nm25-vm2.bullet.mail.ir2.yahoo.com. [212.82.97.35])
by mx.google.com with ESMTPS id j10si30765880wjf.167.2015.08.17.20.45.37
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Mon, 17 Aug 2015 20:45:38 -0700 (PDT)
Received-SPF: neutral (google.com: 212.82.97.35 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=212.82.97.35;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 212.82.97.35 is neither permitted nor denied by best guess record for domain of [email protected]) smtp.mailfrom=fastwaycourierworldwidede ... ahoo.co.uk;
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.co.uk
DKIM-Signature: <snipped>
Received: from [212.82.98.55] by nm25.bullet.mail.ir2.yahoo.com with NNFMP; 18 Aug 2015 03:45:37 -0000
Received: from [212.82.98.107] by tm8.bullet.mail.ir2.yahoo.com with NNFMP; 18 Aug 2015 03:45:37 -0000
Received: from [127.0.0.1] by omp1044.mail.ir2.yahoo.com with NNFMP; 18 Aug 2015 03:45:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 217.12.9.8; Tue, 18 Aug 2015 03:45:37 +0000
Date: Tue, 18 Aug 2015 03:45:25 +0000 (UTC)
From: Fastway Courier Services <[email protected]>
Reply-To:
Fastway Courier Services <[email protected]>
To: "<snipped>" <<snipped>>
Message-ID: <[email protected]>
Subject: DELIVERY OPTION:Reg Order No:SD52628?
MIME-Version: 1.0

18th August, 2015

Reg Order No:SD52628

ATTENTION:

Thank you for contacting Fastway couriers services.

This is to inform you that you have been officially cleared for payment by the Verifications Dept. at the headquarters of the United Kingdom Online International Lottery Award.

The original copy of this certificate, together with a covering document (Money Laundering protection and Letter of Affidavit for Claims) from the British government stating that the money was obtained legally through the United Kingdom Online international Lottery Award will be sent to you by the bank as soon as you meet with any of the option selected and your winnings will be couriered or transferred to you immediately.

You can now begin the final step of the claims process, which is the transferring of your cash prize to you. With regards to this, there are two options open to you, you are required to select the most convenient of the two.

The options, together with their associated conditions are presented below:

Option 1:
Courier of your winning draft to you via any of this channel listed below:

REDCOURIER (2 Working days delivery)
Mailing.............................................£ 30.00
Insurance...........................................£632.00
Vat (5%)............................................£ 13.00
TOTAL...............................................£675.00

PROCOURIER (3 Working days delivery)
Mailing &n bsp;.....................................£ 34.00
Insurance...........................................£550.00
Vat (5%)............................................£ 18.00
TOTAL...............................................£602.00

FASTWAY COURIER (3 Working days delivery)
Mailing ;...........................................£ 34.00
Insurance...........................................£550.00
Vat (5%)............................................£ 15.00
TOTAL...............................................£599.00

The insurance company declined reverse payment for the courier, stating that it is against their professional policy towards ensuring the safe delivery of the draft to you. That if a reverse payment is made, and something goes wrong, that we/you cannot sue the courier company or insurance company to recover the full value of t he fund as stipulated in the draft since payment for insurance cover was not made at point of mailing.

With the above reason, reverse payment is ruled out.Forward the cost of mailing your draft with any of the courier channel cost you choose above to us.

Option 2:

The said amount claim £12,000,000.00 (TWELVE MILLION GREAT BRITAIN POUNDS) will be wired to your bank account via swift bank transfer.

Condition: The cost of COT (commission of transfer) being charged by our transferring bank, which is 0.8% (i.e £2,000) of the cash being transferred will be paid by you.

Note that your prize is protected by a hardcover insurance policy, which makes it impossible to deduct any amount from the money before it has been remitted to you. This means that the above charges cannot be deducted from the prize and hence must be provided by you before your prize is transferred to you.

Please respond to this email by making a selection from the two options above.

Also attach a scanned copy of either your driver's license, international passport (photo page) or any other legally identifying document.

Also be reminded that the deadline for the claiming of winnings is exactly two weeks after the receipt of this email. After this period, your cash prize will be deemed to have been forfeited by you and will be reused in the drawings of the next edition of the Award.

Good luck and Congratulations once again. Please send your response within the next 24hrs to this same email address.

Mr. Billy Parker
Management
Fastway Couriers Service Ltd
(TEL:+447045716888
(TEL:+447087644923
(TEL:+447031842739
Open 7days-24hrs-365days a year.