Scams re-targeting those who have already been victimized
#238031 by Faizan Docherty Mon Feb 16, 2015 7:38 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.138.169.195
Originating ISP: Visafone
City: Uyo
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline


From "James C. Cowles Thu Feb 12 21:09:05 2015
X-Apparently-To: <snipped>; Mon, 16 Feb 2015 18:02:40 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 67.43.3.3
Received-SPF: none (domain of yahoo.com.ph does not designate permitted sender hosts)
X-YMailISG: <snipped>
X-Originating-IP: [67.43.3.3]
Authentication-Results: mta1674.mail.gq1.yahoo.com from=yahoo.com.ph; domainkeys=neutral (no sig); from=yahoo.com.ph; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO host3.millionairegraduates.com) (67.43.3.3)
by mta1674.mail.gq1.yahoo.com with SMTPS; Mon, 16 Feb 2015 18:02:40 +0000
Received: from [41.138.169.195] (port=60295 helo=User)
by host3.millionairegraduates.com with esmtpa (Exim 4.82)
(envelope-from <[email protected]>)
id 1YM10T-0000mZ-Qk; Thu, 12 Feb 2015 16:09:06 -0500
Reply-To: <[email protected]>
From: "James C. Cowles"<[email protected]>
Subject: Attn: Fund Beneficiary,
Date: Thu, 12 Feb 2015 22:09:05 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 150211-1, 02/11/2015), Outbound message
X-Antivirus-Status: Clean
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host3.millionairegraduates.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.com.ph
X-Get-Message-Sender-Via: host3.millionairegraduates.com: authenticated_id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
Content-Length: 3052


Office of Inspector General
c/o Board of Governors of the Federal Reserve System
20th St. and Constitution Ave. N.W.
Washington, D.C. 20551
Attn: Fund Beneficiary,
This letter will definitely be amazing to you because of its realistic value. Sorry for the delay and inconveniences that was rendered to you in your line of Inheritance Payment transaction with some African Banks/Officials a while ago. This is to let you know that we received a credit instruction from the United States Government Accountability Office (GAO) to credit your bank account with your pending contract/inheritance fund payment in the tune of US$12.5million from the Federal Government reserve account with our bank, CitiBank Dallas USA.
However, what we require from you in order to commence the necessary formalities for onward release of payment to you is a re-confirmation of your information/bank account details where you want your fund to be transferred.
{1}. Your full name and address===========================
{2}. Your telephone, and fax==============================
{3). Bank name and address================================
{4). Name on Acct -- and Acct numbers========================
(5). Swift code / routing number===============================
(6). Your current occupation===================================
(7). Scan Copy of Drivers License or Working ID=======================
Be informed that transfer arrangement of your fund will commence immediately we hear from you. Note, the CitiBank board will not hesitates to release your payment within 72hours in accordance with fund release order regulations.. For more details contact on my private email. ([email protected])
Yours Truly,
Mr. JAMES C. COWLES
Chief Executive Officer
Europe, Middle East & Asia.
C/o
Peter Moses
Managing Director
CitiBank

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

#239072 by Faizan Docherty Tue Feb 24, 2015 9:43 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.71.163.37
Originating ISP: Visafone
City: Port Harcourt
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.43.144 with SMTP id r138csp1369733lfr;
Mon, 23 Feb 2015 10:46:07 -0800 (PST)
X-Received: by 10.236.51.134 with SMTP id b6mr11061336yhc.121.1424717166345;
Mon, 23 Feb 2015 10:46:06 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.Marathon.local (mail.drivemarathon.com. [64.53.108.170])
by mx.google.com with ESMTP id k51si2223238yho.125.2015.02.23.10.45.58;
Mon, 23 Feb 2015 10:46:06 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=64.53.108.170;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=yahoo.com.ph
Received: from User ([41.71.163.37]) by mail.Marathon.local with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 22 Feb 2015 19:09:52 -0500
Reply-To: <[email protected]>
From: "Citi Bank Dallas"<[email protected]>
Subject: Re: Cbk Notice/
Date: Mon, 23 Feb 2015 01:18:43 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 150222-1, 02/22/2015), Outbound message
X-Antivirus-Status: Clean
Bcc:
Return-Path: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 23 Feb 2015 00:09:53.0031 (UTC) FILETIME=[0C179970:01D04EFD]


Office of Inspector General
c/o Board of Governors of the Federal Reserve System
20th St. and Constitution Ave. N.W.
Washington, D.C. 20551

Attn: Fund Beneficiary,

This letter will definitely be amazing to you because of its realistic value. Sorry for the delay and inconveniences that was rendered to you in your line of Inheritance Payment transaction with some African Banks/Officials a while ago. This is to let you know that we received a credit instruction from the United States Government Accountability Office (GAO) to credit your bank account with your pending contract/inheritance fund payment in the tune of US$12.5million from the Federal Government reserve account with our bank, CitiBank Dallas USA.

However, what we require from you in order to commence the necessary formalities for onward release of payment to you is a re-confirmation of your information/bank account details where you want your fund to be transferred.

{1}. Your full name and address===========================
{2}. Your telephone, and fax==============================
{3). Bank name and address================================
{4). Name on Acct -- and Acct numbers========================
(5). Swift code / routing number===============================
(6). Your current occupation===================================
(7). Scan Copy of Drivers License or Working ID=======================


Be informed that transfer arrangement of your fund will commence immediately we hear from you. Note, the CitiBank board will not hesitates to release your payment within 72hours in accordance with fund release order regulations.. For more details contact on my private email. ([email protected])

Yours Truly,

Mr. JAMES C. COWLES
Chief Executive Officer
Europe, Middle East & Asia.

C/o

Peter Moses
Managing Director
CitiBank

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: No registered users and 9 guests