jfrankdanny@gmail.com

[Wayne]

ARE YOU STILL ALIVE?
People
Capital Tibra Bank <jfrankdanny@gmail.com> Today at 13:26
Reply-To: info@capitaltibra.com
To
BCC
Message body
Dear Sir,

I write to confirm if the application made on your behalf by Mr.George
Switz that you are dead and submitted an affidavit signed with headed
papers thus, empowering him to claim your Contract/Inheritance sum of
($10.5Million) on your behalf in our bank.

Please,I wish to draw your attention and requesting that if you are
still alive,do reply this email immediately or call my direct
telephone number so that I can hear your voice and confirm that you
are still alive.But if within the next 48hours there is no response
from you,it is confirmed that you are dead as claimed and applied for.

The application was made on behalf of Mr.George Switz by Attorney Mike
Dulak with his office situated in Lagos.

I regret the shock this email might cause you if you are still alive.

Best Regards,
Mr. Henry Duke
Director Payment Verification Department.
Tel: +447035917967

From Capital Tibra Bank Thu Jul 21 12:26:28 2016
X-Apparently-To: XXXXXX@yahoo.com; Thu, 21 Jul 2016 12:26:30 +0000
Return-Path: <jfrankdanny@gmail.com>
X-YahooFilteredBulk: 209.85.161.193
Received-SPF: pass (domain of gmail.com designates 209.85.161.193 as permitted sender)
X-YMailISG: jONsMTsWLDutKd5udt2.rD6Ef2B0_9ArA_ard4eo4U1h58lc
uKhb8lXKkqKyLz3gaAyv59_oRAzlfhffplFLbznKBz6zZXzMWva6aASSXVHK
YnH27UvUhXxFIpZegl8vdAHfna9JI9Ft1nnYPjxz62ze60FLEYZnHL49OFjc
EhFdAffJdDiat037MAVsW5UnUxMTiZ_4DZTyVBEG8WdKE28Bn9AqzIyx7czn
kBJoCXkG7BQWR3YSg22zk4UsM48VFBbhD.s6kD6DfOZhv23O7waKchrAUdRm
2UXMiIRnU4FqvAjinbN50A0KwF9dwvathM3zlVdm12sMoEDndiymwoacB_cG
NWGdqq6BZlIRc2gezGeemT0DzNWvs4XnAHadfpYvm6gwFS1zYU96rZtUBRO4
bqWyjj2CLhmusjbJ1Hd7VtVJgwzFTa5ulE_HiRImG9JWwE5V2ce4E8o4P0Fv
ylg9MXFgK9C3_1oecWRHNRxOhDlwvlkciX7.CmT5.lg4gigAD8lSxkzoPPE9
JRCWkJ_V0w1vqf9bPEsdtYfy9Eu9oKptX1F5jIuBEtt2oo_MATHszOUnPgy_
ANccijBQYHcIaNEkysPl.R3Zedmp0FYUxCstBvtwh8y8W1.vyxTvpGNpRwse
AjdYuPnqPZoUxYASe4p6zotSUUp5vMuKYyOz5O044j8DM1RbaSdmnCYHWaf.
.ZdFTfLjmtB2mPvHKJMebvZZRFxT_QGxkoEsJVxZr7yU9HzRwuneBBYNv9K9
o1HuvBuV2Xzqd.3wyz1Aca8rnGJm5VkbcYiq_ULwUIFrNJrT9aembwUyd.xu
wcJrgiWSEnmKrNouc2h2rs4olSBRQDWAfw3xo8PQ48NNqOMq3uYBILoo_nc7
VFBJl9X7iiCgMnQhAxEprU5dFyArI_sVrf51oushPIP6E7YtxXaY4TsincFv
dXeg1M9jcWOZYJff_96acR0dyWvZxEoPvHkfT7dRs2IHCD9AEH8zeLRr8uQV
iTzFCZTbwVb9IND4qpcgnZXlhNMSPFmnaZYnezzo8wwaK3oiPk6K55lMzzYK
G4.zCnKWbJ7en3X63Ri5AjMbMsrldVNVDlH9xF_0qSannJ8e_fkDkSnhgots
Qeva4Nyj66VU.ndOlSfptJOux8gkdBaj7fWWpUmJKP8iPfP1H_RIVxzCAIr5
S1qv9GpYqSZbLgCq9LEXoBJORe6IJtEQASwzlK04c1y_gPKZl8tMeDOmo_tr
gxwBywmP5boX_NPZIj1yjggc1ogjjdQTxbtMWxXKtXwKiGFokF2PrSNV6sV7
Cmj6299CyJSP5usDCQDRfxKE03UHAATjxw7G0vLX0liQRX91urwovuR1xlHs
v7WAn8ZGVrE4g0cweu.FWF2hLhGhxOX_VWAPJgPNKofDqzJ3TYD9iVyWvf4C
Ilw0siQFOruOB839wWNaPiMAhvCHOcqIhJDHCErFzr9UULS8qi8X1TofkaAJ
zhHCIkrzwY20_fvIR1_HMyKY9Y7MXiN6nhTf5wAI1OU9GtByhYubyfi1zM34
ni7bIOuyjs_RQmrnczRVicY6QI8vxWp3q2cy
X-Originating-IP: [209.85.161.193]
Authentication-Results: mta1067.mail.gq1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-yw0-f193.google.com) (209.85.161.193)
by mta1067.mail.gq1.yahoo.com with SMTPS; Thu, 21 Jul 2016 12:26:30 +0000
Received: by mail-yw0-f193.google.com with SMTP id c13so5349111ywh.2
for <XXXXXX@yahoo.com>; Thu, 21 Jul 2016 05:26:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Iha2x1NVQMJy2sbeLun9xU3ZidLnqsNOb+V5deA9Y5U=;
b=v9hDBQNJbfoOP+AzCZUucK7OqhBs9OCc9zWkZJYQu10Yv+BSeufEX+t9fXCRwI7Zzd
2lOEhnmX3+/4kbKnmqoV8XHt9WnJw2rQ/cUnQ+bZcH0VRV3YglFSCPpel4+lndL88t0w
esiMqyimQGoMacScdZIUIcWtR7UyyIVv9BMcViG0c+uY2jKQUgfcEzNg+T9Mw89W84Nt
K7xGWBBHnMdV5tlRgvPoyGonnshEaNa6+P/1iasM4wJ66ctJ4dg3eSPj6sZBDLFyu4Di
4eZSl2RPT6mX61m+cvFsJh10kiaoYsubCRNVxVunq+4x8otnZpkj5v8eoHSURJ2It489
vDeQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Iha2x1NVQMJy2sbeLun9xU3ZidLnqsNOb+V5deA9Y5U=;
b=ZR8qUigAafe2wuOxUtuyyd03fBmBvMztsV5bqwAKH5JV0HA7PtNG9uxtk08uywDp8K
YKP7E9una+1XCqOmvASejsyRtlLFOG8c/pgXicU8jFGJLQsJ5qHHYWT54OhwiIpFdXTm
z5Cl5a4TUPe5lk8TLbVcGCU4+DfMD17CRvLHd+qjXZEAcISwFMUN0fTvIv3fegqnx7zu
lH6t/DTkZYAq9/kOjxbgcH6/NBNFaPmXN2cNWpkPm45Gq4vVzV3tcy+Nu/74VaC0Jpv2
ZmV6H8iA9wR8Yrl6YiYFIn4mo6aTpAf16uFXq4fxRwsT1/7jV6YDKiH3hB5Q5TX8cz7r
Cvww==
X-Gm-Message-State: ALyK8tJUMA5c7dk897c4fr3ksD7I+L1mQl7+5MZSVoz4VSdpxdMUaIb5l2EqO8xghUAwbbw5szoeni8PmrWfiw==
X-Received: by 10.13.234.211 with SMTP id t202mr33943823ywe.262.1469103989849;
Thu, 21 Jul 2016 05:26:29 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.37.224.144 with HTTP; Thu, 21 Jul 2016 05:26:28 -0700 (PDT)
Reply-To: info@capitaltibra.com
From: Capital Tibra Bank <jfrankdanny@gmail.com>
Date: Thu, 21 Jul 2016 13:26:28 +0100
Message-ID: <CAH=zhiqCV8W6ddBej1fvGf8-N1DY79k9OD=OcFeBBHtUB1=FGg@mail.gmail.com>
Subject: ARE YOU STILL ALIVE?
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc: XXXXXX@yahoo.com
Content-Length: 878

[firefly]

Reply-To: info@capitaltibra.com

The scammers are using a fake site created only for an email address looking legit. The so called bank located in the UK is in fact active in south Africa:

Domain Name: CAPITALTIBRA.COM
Registry Domain ID: 1980056512_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.publicdomainregistry.com
Registrar URL: www.publicdomainregistry.com
Updated Date: 2016-01-15T02:16:17Z
Creation Date: 2015-11-15T09:47:26Z
Registrar Registration Expiration Date: 2016-11-15T09:47:26Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Registrant details:

Registrant Name: Annique Schoorlemmer
Registrant Organization: Capital cotten oil (Tibra)
Registrant Street: 1381 Langley St Pacaltsdorp 6529
Registrant City: Eastern Cape
Registrant State/Province: Eastern Cape
Registrant Postal Code: 6529
Registrant Country: ZA
Registrant Phone: +27.0824305802
Registrant Email: waynedab@yahoo.com