by Raven McNamara
Mon Oct 20, 2014 8:58 pm
Header Analysis Quick Report
Originating IP: 200.143.182.9
Originating ISP: Solucoes De Tecnologia Em Informatica S.a.
City: São Paulo
Country of Origin: Brazil
Acknowledge
From: Steve Benson
Dear Friend,
My name is Steve Benson. I work with one of the leading Banks here in London, UK. I would need your consent to present you as the next of kin to our late customer who died of heart attack in 2009. He was a wealthy business man who deposited a huge amount in our Bank. He died without any registered next of kin as he was long divorced and had no child. I was his account officer and have in my possession all the documents required to present you as his beneficiary next of kin. I contacted you because you have same name identity with our late client and can perfectly fit in as next of kin, We can work together to claim this fund.
Please listen, this is real and goes on in Banks all over the world without people knowing. Let us utilize this opportunity because it does not come always. A lot of customers open private accounts with different Banks without the knowledge of their families and when they die, such money will be lost to the Bank unless someone comes to claim it. This is how a lot of Bank Directors make so much money silently. On your confirmation of this message and indicating your interest, I will furnish you with more details. Please endeavor to provide me with the following so that we can discuss in details, (1)mobile phone numbers,(2) full name, (3)contact address and occupation. I urgently hope to get your response as soon as possible, Reply to [email protected]
Best Regards.
Steve Benson
Return-Path: [email protected]
Received: from mail.chemitec.com.br ([200.143.182.9]) by <snipped> with ESMTP (Nemesis) id 0Lcjcf-1YNdPH2w7T-00k8YG for <snipped>; Mon, 20 Oct 2014 21:08:21 +0200
Received: from localhost (localhost [127.0.0.1]) by mail-chemitec.182.143.200.static.sp2.alog.com.br (Postfix) with ESMTP id ECD866ABB57 for <snipped>; Mon, 20 Oct 2014 17:08:18 -0200 (BRST)
X-Virus-Scanned: by amavisd-new-2.6.4 (20090625) (Debian) at 182.143.200.static.sp2.alog.com.br
X-Amavis-Alert: BAD HEADER SECTION, Improper use of control character (char 0D hex): From: Steve Benson <[email protected]>\r
Received: from mail.chemitec.com.br ([127.0.0.1]) by localhost (mail-chemitec.182.143.200.static.sp2.alog.com.br [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lwXENBNx1bQy for <snipped>; Mon, 20 Oct 2014 17:08:18 -0200 (BRST)
Received: by mail-chemitec.182.143.200.static.sp2.alog.com.br (Postfix, from userid 33) id 2F4F06ABB19; Mon, 20 Oct 2014 17:07:48 -0200 (BRST)
<snipped>Subject: Acknowledge
X-PHP-Originating-Script: 33:shotetrffreer.php
From: Steve Benson <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Message-Id: <20141020190748.2F4F06ABB19@mail-chemitec.182.143.200.static.sp2.alog.com.br>
Date: Mon, 20 Oct 2014 17:07:48 -0200 (BRST)
Content-Transfer-Encoding: quoted-printable
<snipped>X-UI-Filterresults: notjunk:1;V01:K0:Wb4OCoIpPxU=:lxnX2zH/Q9ch9XGobsBXEHSYST DjmKQ2TqquSLNgz5ONFmyrwpRY8uKBPj2EoIPZ6+oWEI0SVxJuyVdm2XuJ5xGzKi463vJLoPm AzBHHonyZN5csEQBjp72nhtnktiimJKsfYnvGRY7Zsw2zPCPkOPRLo3EJZilOTI0PrE598nx8 W5gfRHAUFcrVbwmvRSGuB+mKsdsyAJDD5RKhtuRxC/Izw3PPD8X8h+ooGKZ3DVPwVDJODrhCa pBtPixqf1wW8N/nrl3n787d+SKEKOp8wFsNCn3tiKqGizeT23PdRuZ2mtbdLAwJHfDyv5E07N V1KkNN/gZEN5zUE2+moixrL/V2JK37a4o4n11PzwhEANA3VLf75KDnQMEBoOb5ZdfoZfJNOt8 knZezve3UB5kw9aTMYFoR8AmTYw4PSi7cmAJhsbTMOdDccU7F09baZvfDWiIU6X7tP4tFESdo xbUni2x75JChrm5VFerO1Jz/4lQwlJMoqyKN697dCgww8VMZ+aQZ9YBzN0xjp6drbv3JWXP8K nAoUBLG8kOG8mnANcFA+vZ0DiaPOJpFtfndVK4LeHPz+TKcMYPK6rf/VTnGh/UoVEosUEApLY ECR5NiOQYMxhS8x7h6uqYwRD9JxA4UAy29aPI559q1FAcCkgvFSSdtjEC4cemyh10HmD8pD6S 2PTjw89nxELcZBxAD/OvvrQp8hThHt+swELFU55ffZKswlELKlI1PYgOm5DMT2tukxePxiT/1 EBHVYqh9a3HMju5I2TtWavej0OCmjcyJ6AgSMeQmcNKO0Ck/Wie8LF1FFhbmglUaLIM/6No9R DN2AS9+GreveP09OHK1SeFwMF36Lvb9IggRtdrMXK1R7SiQJGxeuNztsdlX+0wFsJjn/igtSO gsXb8nDDJ5PPTq4NmzZN5S3TqkmX7r0PRjSjPKCB9sk3j+n+hPq65J2WDWnEzkVgUHUQwLin8 AheXXoTVSjKKEr3MTxu1AOyohDN0MPbiVzlgFX2fWgfe3ixM1lfuh94P85jJ708CCeZrEIWU5 JLDz87OQqHNwbmsrs8xYAvaBRvLH9wLCBjgRs6oCuNkOiPUsVEd7AY9leDGXdF6sTZhmb9ppG Tj3RkTrzfk0Z/Ig0N7hA9KeHFyYtZ0IzqQtMw75jEmY6MYCYHSzafkZ8y6SFHHj5F+/HA8Nrv q9kERh/9DCthf821t3CFwBn1QKHAzHKM6DN771YDmQPdSUIgtb7O9dI5c9FHk5BRG16CvGhZh Kqizw+E4x4n8nl2P/mUbTippZO6EdR8IH39nNmsc/4KnLXi0Siw5tjn85Ki9itbbfRuaCCN5M zmyYWjWm1v0AG5nUOlXhrJmhFHdBOCQXFzUElCZpbx7XfpU+Ju1+yTLUKsZqKxls0PtCXKDmj 7/vdRE5lHakMEutU7UlK65fgjPXbCllpoHy8RgCcVaL3a1ucTt02wm/F+RHK3v9VFNs1eucAX sBnZDLFqxDolWZfX8bcq5IWcP5gn4RNh4gWnVEi6HP6p26N1dJ
Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.