+22999488494

[nightmare]

Attention,
Mr.Alex peter <westernuniononey@gmail.com>
Yesterday, 11:12 PM
Attention. Good day, Please we need your current home address and telephone number to enable us start sending your $2.5USD to you as we were instructed by IMF to be sending you $5000.00 each day till the whole amount $2.5USD, Now we need your full name....... Home Address..... Telephone number......... Forward the (westernuniononey@gmail.com) Or call with this telephone number +229-99 488494 ThanksRegard Mr.Alex peter

Received: from server1.xtremeairsoft.com ([184.154.145.242]) by BAY004-MC6F3.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
Wed, 18 Jan 2017 23:12:45 -0800
Received: from alliancereps by server1.xtremeairsoft.com with local (Exim 4.87)
(envelope-from <alliancereps@server1.xtremeairsoft.com>)
id 1cU6tn-0005qf-3Y
for xxx; Thu, 19 Jan 2017 01:12:43 -0600
To: <xxx>
Subject: Attention,
X-PHP-Script: http://www.alliancereps.com/plugins/edi ... mailer.php for 41.138.91.228
Content-Type: text/html; charset="iso-8859-1"
From: Mr.Alex peter <westernuniononey@gmail.com>
Reply-To: <westernuniononey@gmail.com>
X-Mailer: www.alliancereps.com
Message-ID: <E1cU6tn-0005qf-3Y@server1.xtremeairsoft.com>
Date: Thu, 19 Jan 2017 01:12:43 -0600
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.xtremeairsoft.com
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [502 500] / [47 12]
X-AntiAbuse: Sender Address Domain - server1.xtremeairsoft.com
X-Get-Message-Sender-Via: server1.xtremeairsoft.com: authenticated_id: alliancereps/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: server1.xtremeairsoft.com: alliancereps
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php
X-Source-Dir: alliancereps.com:/public_html/plugins/editors/tinymce/fields
Return-Path: alliancereps@server1.xtremeairsoft.com
X-OriginalArrivalTime: 19 Jan 2017 07:12:45.0641 (UTC) FILETIME=[6EDAA390:01D27223]
X-IncomingHeaderCount: 26
X-MS-Exchange-Organization-Network-Message-Id: 0fb2fc0a-5a3e-45d8-1110-08d4403a91c7
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
CMM-sender-ip: 184.154.145.242
CMM-sending-ip: 184.154.145.242

[nightmare]

this scammer has already gone from male to female, and changed his/her email address in a couple of months. Busy scammer he is.

Attention: Dear beneficiary,
Mrs. Helen Giamma <andama@ubaati.com>
Today, 6:32 AM


--
Dear customer,

Your $3.5 Million USD under our custody which your first payment of Us$10.000 will been transferred, you have to contact Mr Richard Williams, Hall the Money Gram Manager and ask him to give you the details of the payment once you reconfirmed him your details ASAP.
.
1Your First Name..........
2Your Second Name.........
3Your Country.............
4Your City................
Telephone.................
Home Address..............
Occupation..............
Cell Phone..............
Country..............
Age..............

Contact: Mr Richard Williams
Tele:..+229-99488494.
Thank you,
Mrs. Helen Giamma

Received: from s89.customizedhosting.net ([91.148.168.54]) by SNT004-MC1F14.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
Mon, 6 Mar 2017 06:32:00 -0800
Received: from [::1] (port=37800 helo=webmail.innovantinterior.com)
by s89.customizedhosting.net with esmtpa (Exim 4.88)
(envelope-from <andama@ubaati.com>)
id 1cktYE-00077Z-Mg; Mon, 06 Mar 2017 19:53:50 +0530
Content-Type: multipart/alternative;
boundary="=_4b7770f8085d2319559737bb7c7f9ef2"
Date: Mon, 6 Mar 2017 19:53:50 +0530
From: "Mrs. Helen Giamma" <andama@ubaati.com>
To: undisclosed-recipients:;
Subject: Attention: Dear beneficiary,
Reply-To: <moneygram4@onet.pl>
Mail-Reply-To: moneygram4@onet.pl
Message-ID: <45954bb9ebc715c567761c7ea67baa5c@ubaati.com>
X-Sender: andama@ubaati.com
User-Agent: Roundcube Webmail/1.2.3
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - s89.customizedhosting.net
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ubaati.com
X-Get-Message-Sender-Via: s89.customizedhosting.net: authenticated_id: rachan@innovantinterior.com
X-Authenticated-Sender: s89.customizedhosting.net: rachan@innovantinterior.com
X-Source:
X-Source-Args:
X-Source-Dir:
Return-Path: andama@ubaati.com
X-OriginalArrivalTime: 06 Mar 2017 14:32:00.0727 (UTC) FILETIME=[6AB61E70:01D29686]
X-IncomingHeaderCount: 25
X-MS-Exchange-Organization-Network-Message-Id: 8f25005e-84a0-4f3a-2963-08d4649d8ed9
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
CMM-sender-ip: 91.148.168.54
CMM-sending-ip: 91.148.168.54
CMM-Authentication-Results: hotmail.com; spf=fail (sender IP is
91.148.168.54) smtp.mailfrom=andama@ubaati.com; dkim=none
header.d=ubaati.com; x-hmca=fail header.id=andama@ubaati.com
CMM-X-SID-PRA: andama@ubaati.com
CMM-X-AUTH-Result: FAIL
CMM-X-SID-Result: FAIL