Scams re-targeting those who have already been victimized
#244975 by Faizan Docherty Sun Apr 05, 2015 9:43 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 209.85.213.175
Originating ISP: Google
City: Gulf Shores
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Return-Path: <[email protected]>
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
by sloti33d1t14 (Cyrus 3.0-git-fastmail-10957) with LMTPA;
Sat, 04 Apr 2015 15:34:21 -0400
X-Sieve: CMU Sieve 2.4
X-Spam: high
X-Spam-score: 14.1
X-Spam-hits: ADVANCE_FEE_5_NEW 2.899, BAYES_50 0.8, DEAR_BENEFICIARY 3.158,
FORM_FRAUD_5 0.213, FREEMAIL_ENVFROM_END_DIGIT 0.25, FREEMAIL_FROM 0.001,
HTML_MESSAGE 0.001, LOTTO_DEPT 0.001, ME_419_MANY0 1.5, ME_419_MANY1 1.5,
ME_419_MANY2 1.5, ME_419_MANY3 1.5, RCVD_IN_DNSWL_LOW -0.7,
SPF_PASS -0.001, SUBJ_ALL_CAPS 1.506, T_FILL_THIS_FORM_SHORT 0.01,
LANGUAGES en, BAYES_USED global, SA_VERSION 3.3.2
X-Spam-source: IP='209.85.213.175', Host='mail-ig0-f175.google.com', Country='US',
FromHeader='com', MailFrom='com'
X-Spam-charsets: plain='UTF-8', html='UTF-8'
X-Resolved-to: <snipped>
X-Delivered-to: <snipped>
X-Mail-from: [email protected]
Received: from mx1 ([10.202.2.200])
by compute3.internal (LMTPProxy); Sat, 04 Apr 2015 15:34:21 -0400
Received: from mx1.messagingengine.com (localhost [127.0.0.1])
by mx1.nyi.internal (Postfix) with ESMTP id 41E50F20014
for <snipped>; Sat, 4 Apr 2015 15:34:21 -0400 (EDT)
Received: from mx1.nyi.internal (localhost [127.0.0.1])
by mx1.messagingengine.com (Authentication Milter) with ESMTP
id AAEC3A15B6A.17BD2F20019;
Sat, 4 Apr 2015 15:34:21 -0400
Authentication-Results: mx1.messagingengine.com;
dkim=pass (2048-bit rsa key) header.d=gmail.com [email protected] header.b=bQfVeFWA;
dmarc=pass header.from=gmail.com;
spf=pass [email protected] smtp.helo=mail-ig0-f175.google.com
Received-SPF: pass (gmail.com ... _spf.google.com: Sender is authorized to use '[email protected]' in 'mfrom' identity (mechanism 'include:_netblocks.google.com' matched)) receiver=mx1.messagingengine.com; identity=mailfrom; envelope-from="[email protected]"; helo=mail-ig0-f175.google.com; client-ip=209.85.213.175
Received: from mail-ig0-f175.google.com (mail-ig0-f175.google.com [209.85.213.175])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(No client certificate requested)
by mx1.messagingengine.com (Postfix) with ESMTPS id 17BD2F20019
for <snipped>; Sat, 4 Apr 2015 15:34:21 -0400 (EDT)
Received: by igcau2 with SMTP id au2so403415igc.1
for <snipped>; Sat, 04 Apr 2015 12:34:19 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.50.79.202 with SMTP id l10mr12739606igx.7.1428176059770;
Sat, 04 Apr 2015 12:34:19 -0700 (PDT)
Received: by 10.36.216.4 with HTTP; Sat, 4 Apr 2015 12:34:19 -0700 (PDT)
Date: Sat, 4 Apr 2015 11:34:19 -0800
Message-ID: <CAOULBDiF1p5UhdhkmFqPh35E=WBTkeVsL6fwqM_p8s9PKNk-tQ@mail.gmail.com>
Subject: RE: NEW GOVERNMENT DEDUCTION POLICY ON CHARGES/FEES AND THE RELEASE
OF YOUR OVER-DUE PAYMENT:

From: john odeh <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=089e0122aaeeb82f0f0512eb26d2


DIRECTOR INTERNATIONAL REMITTANCE DEPARTMENT.
CENTRAL BANK OF
NIGERIA. DR.JOHN ODEH.

ATTENTION: BENEFICIARY.


RE: NEW GOVERNMENT DEDUCTION POLICY ON CHARGES/FEES AND THE RELEASE OF YOUR OVER-DUE PAYMENT:

Owing to the inability of the Central Bank of Nigeria (CBN), Commercial Banks and Committees to offset payment owed Foreign Contractors and inheritance claimants, the Federal Government of Nigeria under the leadership of President & Commander in-Chief Dr. Good luck E. Jonathan has just signed into law the “New Government Deduction Policy of Charges/Fees and has mandated the Foreign Payment Release Board (FPRB) to release all foreign liabilities before the end of this First quarter of 2015 Fiscal Year. This new policy will enable all foreign payment beneficiaries secure the release of their payment . Affected beneficiaries should see this policy as a golden opportunity and also as the government willingness/sincerity to pay genuine liabilities.

The decision of the President was necessitated after the report submitted by an investigation panel revealed unnecessary use of bureaucratic procedures, imposition of unauthorized fees and diversion of beneficiaries funds to accounts not authorized by them. Furthermore, there were deliberate delay on Foreign Payment and gross unofficial misconduct which made mockery of the government image as it affects foreign payment policy.

Consequently the Federal Government has resolved to release all payment by bank to bank wire Transfer to the beneficiary's account. Alternatively, payment can also be considered on your proposal. In line with this directive, it becomes paramount to inform you that based on the details contained in your payment file forwarded to our office from the Federal Ministry of Finance, your payment is among the ‘Priority Category’ which implies your claim is long over-due and the fund will be transferred from our affiliate bank in Europe.i will send you further modalities when i hear from you.


This arrangement will authorize your claim released within 72hrs.You should also reconfirm your claim amount, your bank details and telephone number.



Yours Sincerely,

John Odeh.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: No registered users and 36 guests