by Terminator5
Tue Nov 26, 2013 11:55 am
The source IP address is 41.71.184.122
Geo-Location Information
Country Nigeria
State/Region 05
City Lagos
[email protected]
[email protected]
Begin Scam Email:
Dear Sir
We have transferred your payment from our HSBC account to your bank
account as advance against your PI.
Best regards,
CPS GLOBAL GENERAL TRADING LLC
Phone : +971 4 2667751
Fax : +971 4 2667781
P.O. Box: 115514 | Dubai | UAE
E mail- [email protected]
End Scam Email
Attached HTML file :
HSBC TT SWIFT. html 30Kilobytes.
Header Details:
Delivered-To: xxxxxx
Received: by 10.60.124.131 with SMTP id mi3csp166882oeb;
Mon, 25 Nov 2013 21:03:02 -0800 (PST)
X-Received: by 10.224.54.194 with SMTP id r2mr52923297qag.57.1385442182209;
Mon, 25 Nov 2013 21:03:02 -0800 (PST)
Return-Path: <[email protected]>
Received: from star.mytruehost.com (star.mytruehost.com. [72.29.94.226])
by mx.google.com with ESMTPS id o8si9980534qab.151.2013.11.25.21.03.01
for <multiple recipients>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Mon, 25 Nov 2013 21:03:02 -0800 (PST)
Received-SPF: neutral (google.com: 72.29.94.226 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=72.29.94.226;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 72.29.94.226 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Message-Id: <52942b86.c816e00a.7e1b.fffff648SMTPIN_ADDED_MISSING@mx.google.com>
Received: from [41.71.184.122] (port=51136 helo=User)
by star.mytruehost.com with esmtpa (Exim 4.82)
(envelope-from <[email protected]>)
id 1VlAn8-0003QK-GH; Tue, 26 Nov 2013 00:02:38 -0500
Reply-To: <[email protected]>
From: "CPS GLOBAL GENERAL TRADING LLC"<[email protected]>
Subject: SWIFT PAYMENT gbam
Date: Tue, 26 Nov 2013 06:00:45 -0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0069_01C2A9A6.5C275270"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - star.mytruehost.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.com
X-Get-Message-Sender-Via: star.mytruehost.com: authenticated_id: [email protected]
This is a multi-part message in MIME format.
------=_NextPart_000_0069_01C2A9A6.5C275270
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Geo-Location Information
Country Nigeria
State/Region 05
City Lagos
[email protected]
[email protected]
Begin Scam Email:
Dear Sir
We have transferred your payment from our HSBC account to your bank
account as advance against your PI.
Best regards,
CPS GLOBAL GENERAL TRADING LLC
Phone : +971 4 2667751
Fax : +971 4 2667781
P.O. Box: 115514 | Dubai | UAE
E mail- [email protected]
End Scam Email
Attached HTML file :
HSBC TT SWIFT. html 30Kilobytes.
Header Details:
Delivered-To: xxxxxx
Received: by 10.60.124.131 with SMTP id mi3csp166882oeb;
Mon, 25 Nov 2013 21:03:02 -0800 (PST)
X-Received: by 10.224.54.194 with SMTP id r2mr52923297qag.57.1385442182209;
Mon, 25 Nov 2013 21:03:02 -0800 (PST)
Return-Path: <[email protected]>
Received: from star.mytruehost.com (star.mytruehost.com. [72.29.94.226])
by mx.google.com with ESMTPS id o8si9980534qab.151.2013.11.25.21.03.01
for <multiple recipients>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Mon, 25 Nov 2013 21:03:02 -0800 (PST)
Received-SPF: neutral (google.com: 72.29.94.226 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=72.29.94.226;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 72.29.94.226 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Message-Id: <52942b86.c816e00a.7e1b.fffff648SMTPIN_ADDED_MISSING@mx.google.com>
Received: from [41.71.184.122] (port=51136 helo=User)
by star.mytruehost.com with esmtpa (Exim 4.82)
(envelope-from <[email protected]>)
id 1VlAn8-0003QK-GH; Tue, 26 Nov 2013 00:02:38 -0500
Reply-To: <[email protected]>
From: "CPS GLOBAL GENERAL TRADING LLC"<[email protected]>
Subject: SWIFT PAYMENT gbam
Date: Tue, 26 Nov 2013 06:00:45 -0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0069_01C2A9A6.5C275270"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - star.mytruehost.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.com
X-Get-Message-Sender-Via: star.mytruehost.com: authenticated_id: [email protected]
This is a multi-part message in MIME format.
------=_NextPart_000_0069_01C2A9A6.5C275270
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Daniel 8 :25