PDA

View Full Version : Wells Fargo have joined the team



Billy T
31-07-2014, 11:54 AM
Just another scam, but this one had a difference: It contained the geo-coordinates for what I presume was the originating computer.

An image of their shop-front in Santiago is attached. Note the prominent 'Wells-Fargo' logo.


Subject: Documents - WellsFargo
Thread-Topic: Documents - WellsFargo
Thread-Index: R6HG79WWK3QTSM1XUO73414Q5BE3G5YX=
Message-ID: <53D92D21.5090607@MSGCMOXM8598.ent.wfb.bank.corp>
References: <53D92D21.6010205@axxxxxx.co.nz>
In-Reply-To: <53D92D21.3020507@xxxxxx.co.nz>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: YES
X-MS-TNEF-Correlator:
acceptlanguage: en-US
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_17534_3257556822.2659129099176"
X-Bayes-Prob: 0.0001 (Score 0, tokens from: xxx@orcon.net.nz, base:default, @@RPTN)
X-Spam-Score: 7.72 (*******) [Tag at 8.00] FH_HELO_EQ_D_D_D_D:1.117,HELO_DYNAMIC_IPADDR:3.243 ,RDNS_DYNAMIC:0.363,SPF(softfail:3)
X-CanIt-Geo: ip=200.104.79.205; country=CL; region=Santiago Metropolitan; city=Santiago; latitude=-33.4500; longitude=-70.6667; http://maps.google.com/maps?q=-33.4500,-70.6667&z=6
X-CanItPRO-Stream: base:xxxxxxl@orcon.net.nz (inherits from base:default)
X-Canit-Stats-ID: 01MwFGKJL - 042fbe4074ba - 20140731
X-Scanned-By: CanIt (www . roaringpenguin . com)

This is a multi-part message in MIME format.
------=_Part_17534_3257556822.2659129099176
Content-Type: text/plain; charset=windows-1251; format=flowed
Content-Transfer-Encoding: 7bit

Please review attached files.

Robyn Cox
Wells Fargo Advisors
817-946-1856 office
817-319-5212 cell
Robyn.Cox@wellsfargo.com

Investments in securities and insurance products are:
NOT FDIC-INSURED/NO BANK-GUARANTEES/MAY LOSE VALUE

Wells Fargo Advisors, LLC is a nonbank affiliate of Wells Fargo & Company, Member FINRA/SIPC. 1 North Jefferson, St. Louis, MO 63103

CONFIDENTIAL NOTICE: The contents of this message, including any attachments, are confidential and are intended solely for the use of the person or entity to whom the message was addressed. If you are not the intended recipient of this message, please be advised that any dissemination, distribution, or use of the contents of this message is strictly prohibited. If you received this message in error, please notify the sender. Please also permanently delete all copies of the original message and any attached documentation. Thank you.


------=_Part_17534_3257556822.2659129099176
Content-Type: application/zip;
name="account_doc~9345875757.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
name="account_doc~9345875757.zip"

UEsDBBQAAAAIAA+O/kQT1YvxMicAAABcAAAaAAAAYWNjb3VudF9kb2N+OTM0NTg3NTc 1Ny5l
eGXsewlcU8e+/wQIgoIElcW1IAQBIyBJBBXaycYmS1hUcCVAJGFJaBIuuLVBUMF oi72111rr
xZa6ouItKi71gIASj1iR2opLXSoaDSBtsYJFz5uToLLYvv/7v/e5Pu+74+d3ZuY3v5n5zu83
VEnFNiTHaVTPGjPElKWMgjt9KPOaiquUyL5w0FfVpK/k0ldkzPp2GuzLt+HHL1BLAQIfABQA
AAAIAA+O/kQT1YvxMicAAABcAAAaACQAAAAAAAAAIAAAAAAAAABhY2NvdW5 0X2RvY345MzQ1
ODc1NzU3LmV4ZQoAIAAAAAAAAQAYAEe2RwFArM8BK0h9BwCszw ErSH0HAKzPAVBLBQYAAAAA
AQABAGwAAABqJwAAAAA=
------=_Part_17534_3257556822.2659129099176--

Cheers

Billy 8-{) :D

You'd think WF would have snaffled that URL, it made it too tempting for their new Chile Branch