championd892@gmail.com

[Big Al]

Dear Sir/Madam,

This is to let you know that the Credit Department of the bank has finally and safely moved your funds to the Security Vault.

The Board of Directors has advised and instructed me to email you with immediate effect concerning the update status of your funds.

Kindly reconfirm to us the following,
Your full name, Your direct Phone number & Your current address.

Please can you reconfirm the above information and also indicate your interest to claim your fund within the next 48 hours

Waiting for your swift response.

Thanks for your co-operation

Yours Sincerely,
David Champion

Header:

Return-Path: <david.champ@t-online.de>
X-Originating-Ip: [194.25.134.83]
Subject: Your Funds Safely Moved and Deposited at security vault
To: Recipients <david.champ@t-online.de>
From: "David Champion" <david.champ@t-online.de>
Date: Tue, 06 Sep 2022 06:13:54 +0800
Reply-To: championd892@gmail.com
Message-ID: <1oVKM3-3lx2ok0@fwd79.t-online.de>

[Big Al]

Dear Sir/Madam,

This is to let you know that the Credit Department of the bank has finally and safely moved your funds to the Security Vault.

The Board of Directors has advised and instructed me to email you with immediate effect concerning the update status of your funds.

Kindly reconfirm to us the following,
Your full name, Your direct Phone number & Your current address.

Please can you reconfirm the above information and also indicate your interest to claim your fund within the next 48 hours

Waiting for your swift response.

Thanks for your co-operation

Yours Sincerely,
David Champion

Header:

Return-Path: <david.champion@t-online.de>
Received: from HY-37896.56560 ([144.172.72.252]) by fwd77.t-online.de with (TLSv1:AES256-SHA encrypted) esmtp id
Subject: Your Funds Safely Moved and Deposited at security vault
To: Recipients <david.champion@t-online.de>
From: David Champion <david.champion@t-online.de>
Date: Tue, 06 Sep 2022 05:57:32 +0800
Reply-To: championd892@gmail.com
Message-ID: <1oVK6D-0hz0120@fwd77.t-online.de>

Orig IP: 144.172.72.252 | Orig ISP: Bigbrain | City: n/a | Country: United States

[Big Al]

Same E-mail posted on September 5th, 2022 from header:

Received: from 127.0.0.1
Return-Path: < David.Champion@t-online.de >
X-Originating-Ip: [194.25.134.83]
From: "David Champion" <David.Champion@t-online.de>
Date: Thu, 20 Oct 2022 05:36:52 +0800
Reply-To: championd892@gmail.com
Message-ID: <1olGkY-05Z6NX0@fwd85.t-online.de>

[Big Al]

Dear Sir/Madam,

Good Morning

This is to put to your notice that our bank has finally and safely moved your funds to the Security Vault.

Please can you indicate your interest and willingness to claim your funds before it will be sent to the government treasury as unclaimed and forfeited funds?

Confirm receipt of email

Waiting for your swift response.

Thanks for your co-operation

Yours Sincerely,
David Champion

Header:

Received: from 127.0.0.1
Return-Path: <David.Champion@t-online.de>
X-Originating-Ip: [194.25.134.20]
Subject: Attn: Kindly Reply
To: Recipients <David.Champion@t-online.de>
From: "David Champion" <David.Champion@t-online.de>
Date: Fri, 28 Oct 2022 05:09:25 +0800
Reply-To: championd892@gmail.com
Message-ID: <1ooA89-0qsc7m0@fwd77.t-online.de>

[firefly]

Recovery scam.

Dear Sir/Madam,

Good Morning

This is to put to your notice that our bank has finally and safely moved your funds to the Security Vault.

Please can you indicate your interest and willingness to claim your funds before it will be sent to the government treasury as unclaimed and forfeited funds?

Confirm receipt of email

Waiting for your swift response.

Thanks for your co-operation

Yours Sincerely,
David Champion

Header:

Return-Path: <David.Champion@t-online.de>
Received: from HY-37896.56560 ([144.172.72.252])
Subject: Attn: Kindly Reply
To: Recipients <David.Champion@t-online.de>
From: David Champion <David.Champion@t-online.de>
Date: Fri, 28 Oct 2022 06:11:24 +0800
Reply-To: championd892@gmail.com
Message-ID: <1ooB67-0AgQpW0@fwd78.t-online.de>

Originating IP: 144.172.72.252
Originating ISP: Bigbrain
Country of Origin: United States

[Big Al]

Dear Sir/Madam,

Good Morning

This is to put to your notice that our bank has finally and safely moved your funds to the Security Vault.

Please can you indicate your interest and willingness to claim your funds before it will be sent to the government treasury as unclaimed and forfeited funds?

Confirm receipt of email

Waiting for your swift response.

Thanks for your co-operation

Yours Sincerely,
David Champion

Header:

Received: from 10.197.34.204
Return-Path: <david.champion@t-online.de>
X-Originating-Ip: [194.25.134.19]
Subject: Attn: Kind Reply
To: Recipients <david.champion@t-online.de>
From: "David Champion" <david.champion@t-online.de>
Date: Wed, 30 Nov 2022 23:04:12 +0000
Reply-To: championd892@gmail.com
Message-ID: <1p0W7q-3QWsaq0@fwd82.t-online.de>