mypersdata@att.net

[Wayne]

TOP CONFIDENTIAL !!!!!
Mr. Stuart Lewis. <mypersdata@att.net> May 12 at 1:55 PM
Reply-To: <customer.deutschebank_ag@yahoo.co.uk>
Message body
Greetings from Mr. Clifford Culmer,

I am the Chief Risk Officer and Credit System Programmer with (Deutsche Bank AG).I saw your email address while browsing through the Bank DTC Screen in my office yesterday so I decided to use this very chance to know you. I believe we should use every opportunity to know each other better. However, I am contacting you for obvious reason of mutual benefit which you will understand.

I am sending this mail just to know if this email address is OK, reply me back so that I will send more details to you. I have a very important thing to discuss with you, I look forward to receiving your repose at this email:
investigation.payment.unit@deutschebank-uk.com or customer.deutschebank_ag@yahoo.co.uk

Have a pleasant day.

Mr. Stuart Lewis.
Chief Risk Officer
Deutsche Bank AG
London UK.
Cell: +447045775008.

[firefly]

Email:

Dear xxx,

I am a bit surprised at your response hence I may not be able to open up to you at the moment but all things being equal I understand you are at one time or the other expecting some approved fund in Nigeria which you were unable to secure due to logistic and financial reasons.

If you will want to know why I contacted you today then give me a call or better still accord me your full details but I must assure you that I am for real and whatever I am offering you is 100% legitimate. Please don’t get me wrong as whatever I am about to do is for your own good and best interest.

I need you to reconfirm the outstanding approved payment details you are expecting from Africa {Nigeria} and your contact/personal details, I need to match it with what I have here so I can issue you my terms/conditions to release the fund to you either by Bank Draft/Check or ATM Master Card. You should understand why I am being careful/skeptical over the issue so I employ you to bear with me.

Have a pleasant day.

Mr. Stuart Lewis.
Chief Risk Officer
Deutsche Bank AG
London UK.
Cell: +44-7045-775008.
E-mail: investigation.payment.unit@deutschebank-uk.com

+447045775008
Number billable as personal number
Country or destination United Kingdom
Original network provider* Open Telecom International Ltd

Header:

Return-Path: <investigation.payment.unit@deutschebank-uk.com>
Received: from us2.outbound.mailhostbox.com (us2.outbound.mailhostbox.com. [162.210.70.53])
Received: from 172.16.214.51 (unknown [199.79.63.242])
(using TLSv1 with cipher AES256-SHA (256/256 bits))
(No client certificate requested)
(Authenticated sender: investigation.payment.unit@deutschebank-uk.com)
by us2.outbound.mailhostbox.com (Postfix) with ESMTPSA id 6F56A181197
for < >; Sat, 21 May 2016
Date: Sat, 21 May 2016
From: "Mr.Stuart Lewis" <investigation.payment.unit@deutschebank-uk.com>
Reply-To: "Mr.Stuart Lewis" <investigation.payment.unit@deutschebank-uk.com>
To:
Message-ID: <697965274.159377.4ab68836-02d2-44ab-9d1e-0a3ec097127f.open-xchange@webmail.deutschebank-uk.com>
In-Reply-To: <CAPqXmjcGaCFn6-NaqapX-idkE03bBk-66Ns6F_ygZy6ueV8ezA@mail.gmail.com>
References: <CAPqXmjcGaCFn6-NaqapX-idkE03bBk-66Ns6F_ygZy6ueV8ezA@mail.gmail.com>
Subject: Re: About your email
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_159367_1837734506.1463814681358"
X-Priority: 3
Importance: Medium
X-Mailer: Open-Xchange Mailer v7.8.0-Rev26
X-Originating-Client: open-xchange-appsuite
X-CMAE-Score: 0
X-CMAE-Analysis: v=2.1 cv=U5oydbfu c=1 sm=1 tr=0
a=V2oOSHMQU5vliqJq82dxgQ==:117 a=V2oOSHMQU5vliqJq82dxgQ==:17
a=L9H7d07YOLsA:10 a=9cW_t1CCXrUA:10 a=s5jvgZ67dGcA:10
a=iBEBaRVX_8n7oLM-0EMA:9 a=1bkeL0axvpv-SQtc:21 a=xPjRvIrl_jNVugW6:21
a=QEXdDO2ut3YA:10 a=Ep2G-PXrdm8A:10 a=raXGE3Ig5e3D2duXdj8A:9
a=GAklnUOLXmgLRiG2:21 a=O-5LzS-7O_SwED80:21 a=mPOJhHsixGFEB-wm:21
a=_W_S_7VecoQA:10

------=_Part_159367_1837734506.1463814681358
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Originating IP: 199.79.63.242
Originating ISP: Confluence Networks
City: Burlington
Country of Origin: United States

[firefly]

The scammer is impersonating Deutsche Bank AG, founded in Berlin in 1870. The real bank has indeed a company headquarters in London... but not using a redirected phone number for a contact.

The fake site impersonating the real bank was recently created and the registrant is located in the United States. The fake domain is used only for the email address.

Domain Name: DEUTSCHEBANK-UK.COM
Registry Domain ID: 2016895682_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.iaregistry.com
Registrar URL: http://www.spiritdomains.com
Updated Date: 2016-03-29T12:20:31Z
Creation Date: 2016-03-29T12:20:30Z
Registrar Registration Expiration Date: 2017-03-29T12:20:30Z
Registrar: THE REGISTRY AT INFO AVENUE
Registrar IANA ID: 123
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: Kelly Patten
Registrant Organization: N/A
Registrant Street: 6711 Peach Tree
Registrant City: San Antonio
Registrant State/Province: Texas
Registrant Postal Code: 78238
Registrant Country: US
Registrant Phone: +1.2102195560
Registrant Email: domainsalvan@yahoo.com