Mr. Dominic T. Ray [email protected]

Header Analysis Quick Report
Originating IP: 120.151.44.59
Originating ISP: Telstra Internet
City: Ulverstone
Country of Origin: Australia
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.143.18 with SMTP id r18csp867151iod;
Sat, 8 Aug 2015 05:19:09 -0700 (PDT)
X-Received: by 10.55.27.1 with SMTP id b1mr22875265qkb.39.1439036349648;
Sat, 08 Aug 2015 05:19:09 -0700 (PDT)
Return-Path: <[email protected]>
Received: from e-mail.anageimoveis.com.br (mail.anageimoveis.com.br. [201.47.57.175])
by mx.google.com with ESMTP id f89si24182490qkf.59.2015.08.08.05.19.08;
Sat, 08 Aug 2015 05:19:09 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 201.47.57.175 as permitted sender) client-ip=201.47.57.175;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 201.47.57.175 as permitted sender) [email protected]
Message-Id: <[email protected]>
Received: from User (hardin11.lnk.telstra.net [120.151.44.59])
(Authenticated sender: [email protected])
by e-mail.anageimoveis.com.br (Postfix) with ESMTPA id 2208750F2DD;
Sat, 8 Aug 2015 09:18:43 -0300 (BRT)
Reply-To: <[email protected]>
From: "Mr. Dominic T Ray"<[email protected]>
Subject: {Spam?} RE: READ THIS IMPORTANT INFORMATION
Date: Sat, 8 Aug 2015 22:17:41 +1000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-anageimoveis-com-br-MailScanner-Information: Please contact the ISP for more information
X-anageimoveis-com-br-MailScanner-ID: 2208750F2DD.A9FC9
X-anageimoveis-com-br-MailScanner: <snipped>
X-anageimoveis-com-br-MailScanner-SpamScore: sssssssss
X-anageimoveis-com-br-MailScanner-From: [email protected]
X-anageimoveis-com-br-MailScanner-Watermark: 1439641147.18552@Vn/fYQ4jFMYP+31vlBlsGA
X-Spam-Status: Yes

A Good Friend

Good day to you , I crave your indulgence to acknowledge the receipt of this paroposal . Am very self-reliant to make this appeal to you so we can handle a business transaction that will change our financial status .
Please, note that the understanding facts expressed here is highly confidential . I need your collaboration to stand as a strategic partner regarding a substantial amount of capital for investment purposes or otherwise .

I discovered this capital in our financial institution , it was supposed to be owned by external / foreign contractors that supplied products / did one contract or so in our country, but after several months of thorough investigation, i found out that the fund does not belong to any external contractor , it was an over draft payment made in regards to the external contractors which no name was tagged to it, in other words, I carefully placed this fund on a hidden profile for the past 20 months without any internal / external auditors in our financial institution referring to it.
There are no illegal act on this transaction, all we have to do is to follow the due process and my instruction accordingly to transfer this fund to your nominated bank account .

If you are interested in partnering with me , your acknowledgment will prompt me for more details .

Kind Regards

Dominic T Ray

He's changed email addresses: [email protected] and is using the phone number +233-241049812

Header Analysis Quick Report
Originating IP: 197.251.167.103
Originating ISP: Vodafone Ghana
City: Accra
Country of Origin: Ghana
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.27.220.9 with SMTP id t9csp64059wlg;
Wed, 12 Aug 2015 00:21:54 -0700 (PDT)
X-Received: by 10.68.234.69 with SMTP id uc5mr64119605pbc.81.1439364114114;
Wed, 12 Aug 2015 00:21:54 -0700 (PDT)
Return-Path: <[email protected]>
Received: from proxy90-5.mail.163.com (proxy90-5.mail.163.com. [43.230.90.5])
by mx.google.com with ESMTPS id bz4si8001668pab.196.2015.08.12.00.21.52
for <<snipped>>
(version=TLSv1.2 cipher=RC4-SHA bits=128/128);
Wed, 12 Aug 2015 00:21:54 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 43.230.90.5 as permitted sender) client-ip=43.230.90.5;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 43.230.90.5 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yeah.net
DKIM-Signature: <snipped>
Received: from ww1566487718$yeah.net ( [197.251.167.103, 10.144.1.72] ) by
ajax-webmail-app4 (Coremail) ; Wed, 12 Aug 2015 15:21:48 +0800 (CST)
X-CM-HeaderCharset: UTF-8
X-Originating-IP: [197.251.167.103, 10.144.1.72]
Date: Wed, 12 Aug 2015 15:21:48 +0800 (CST)
From: ww1566487718 <[email protected]>
To: <snipped>
Subject: Re: READ THIS IMPORTANT INFORMATION
X-Priority: 3
X-Mailer: Coremail Webmail Server Version SP_ntes V3.5 build
20150803(72677.7612) Copyright (c) 2002-2015 http://www.mailtech.cn yeah
X-CM-CTRLDATA: mf+Np2Zvb3Rlcl9odG09OTE0NzoxODg=
Content-Type: multipart/alternative;
boundary="----=_Part_450084_1650273575.1439364108228"
MIME-Version: 1.0
Message-ID: <[email protected]>
X-CM-TRANSID:NVUQrEB5HUMN9MpVffUxAA--.1020W
X-CM-SenderInfo: lzzrklywuyllyry65vtdko0vbw/1tbiDwtThFH7b30FLwADsC
X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU==

Thanks for acknowledging the receipt of my proposal. Am very confident that we can handle this business transaction successfully, I want you to understand this fact, whatever that is fake has it original somewhere, all you need to do is to be very observant to know the kind of people you dealing, not all these low life that has no deal to offer, when you meet them, you will get nothing out of it, but am very sure we can make a good deal out of this .I need your cooperation to transfer the sum of $ 25,101,231.01 to your nominated bank account, I carefully choose you because of the good reputation you have achieve so far, i have ascertain within myself that you will stand and claim this fund without taking advantage of me and i believe you I will not do that.

The first procedure is to send your detail information which i will use for data re-profiling in our Bank, (Bank Of Baroda). In other to be the valid beneficiary of Twenty Five Million, One Hundred and One Thousand, Two hundred and Thirty One United State Dollars with our bank. be rest assured your information is protected.

This is what you will provide:
Full Names
Full Address:
Telephone:
Occupation:
Date Of Birth:
Marital Status:
Copy of your International Passport or Driver's License.

The second procedure is that i will send you the Bank's Original Application Form which you will fill and send to the Bank requesting for your funds to be transferred to your choice bank in your country. Note all you have to do is to follow my instructions accordingly to avoid any short comings, although i do not see it coming because we will handle this transaction successfully.

I wait for you information

Mr Ray.

Then later he sent:

I have tried to speak with you on phone but it is on a voice mail , can you please give me a call on +233 24 104 9812 .

Thanks so much for your cooperation .

Dominic .

Mr. Ray's "bank". The domain bankdebaroda.com is in the process of being reported for fraud.

Header Analysis Quick Report
Originating IP: 199.79.63.242
Originating ISP: Confluence Networks
City: n/a
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.64.107.200 with SMTP id he8csp440216ieb;
Thu, 20 Aug 2015 22:32:48 -0700 (PDT)
X-Received: by 10.182.246.202 with SMTP id xy10mr6173705obc.64.1440135168226;
Thu, 20 Aug 2015 22:32:48 -0700 (PDT)
Return-Path: <[email protected]>
Received: from us2.outbound.mailhostbox.com (us2.outbound.mailhostbox.com. [208.91.198.28])
by mx.google.com with ESMTP id 1si4815213oig.139.2015.08.20.22.32.47
for <<snipped>>;
Thu, 20 Aug 2015 22:32:48 -0700 (PDT)
Received-SPF: neutral (google.com: 208.91.198.28 is neither permitted nor denied by domain of [email protected]) client-ip=208.91.198.28;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 208.91.198.28 is neither permitted nor denied by domain of [email protected]) [email protected]
Received: from 172.16.214.51 (unknown [199.79.63.242])
(using TLSv1 with cipher AES256-SHA (256/256 bits))
(No client certificate requested)
(Authenticated sender: [email protected])
by us2.outbound.mailhostbox.com (Postfix) with ESMTPSA id A6D651C0DB4
for <<snipped>>; Fri, 21 Aug 2015 05:32:46 +0000 (GMT)
Date: Fri, 21 Aug 2015 11:02:46 +0530 (IST)
From: Bank De Baroda <[email protected]>
Reply-To: Bank De Baroda <[email protected]>
To: <<snipped>>
Message-ID: <187947436.2533975.1440135166637.JavaMail.open-xchange@172.16.214.51>
Subject: Baroda Transaction Alert [Credit: -$25,101,231.01 USD ]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_2533974_1462917608.1440135166522"
X-Priority: 3
Importance: Medium
X-Mailer: Open-Xchange Mailer v7.6.2-Rev12
X-Originating-Client: open-xchange-appsuite
X-CMAE-Score: 0
X-CMAE-Analysis: <snipped>
X-CTCH-Spam: Unknown
X-CTCH-VOD: Unknown
X-CTCH-RefID: str=0001.0A020202.55D6B7FF.0111,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0

Baroda Transaction Alert Service

Please be informed that a credit transaction occurred on your bank account.

Kindly find details of the transaction below:

Transaction Details

Account Number : #478-120-57--02

Description : 000128675863/DECP SELF

Reference No : 012/45

Transaction Branch : ACCRA GHANA

Transaction Amount : $25,101,231.01 USD

Transaction Time : 5:30 pm

Transaction Date : 10-Aug-2015

As a result of this transaction, the balances on this account are:

Available Balance: $25,101,231.01 USD

Ledger Balance: $25,000,000.00

Kindly note that this is your account balance as of 20-August 2015 .

Thank You For Banking With Us

Bank of Baroda (Ghana) Ltd.
Kwame Nkrumah Avenue,
Next to Melcom, Adabraka,
Post Mail Bag No. 298, AN
Accra, Ghana
E-mail: [email protected]


About Us | Investor Relations | Subsidiaries & JVs | Customer Care | Contact Us |

© 2015 Bank of Baroda. All rights reserved

Delivered-To: <snipped>
Received: by 10.27.220.9 with SMTP id t9csp165168wlg;
Wed, 2 Sep 2015 20:41:03 -0700 (PDT)
X-Received: by 10.152.20.98 with SMTP id m2mr19216474lae.119.1441251663791;
Wed, 02 Sep 2015 20:41:03 -0700 (PDT)
Return-Path: <[email protected]>
Received: from forward11h.cmail.yandex.net (forward11h.cmail.yandex.net. [87.250.230.153])
by mx.google.com with ESMTPS id jh9si21862067lbc.54.2015.09.02.20.41.03
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 02 Sep 2015 20:41:03 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 87.250.230.153 as permitted sender) client-ip=87.250.230.153;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 87.250.230.153 as permitted sender) [email protected];
dkim=pass [email protected]
Received: from web19h.yandex.ru (web19h.yandex.ru [IPv6:2a02:6b8:0:f05::29])
by forward11h.cmail.yandex.net (Yandex) with ESMTP id C1FE220CDC
for <<snipped>>; Thu, 3 Sep 2015 06:41:01 +0300 (MSK)
Received: from 127.0.0.1 (localhost [127.0.0.1])
by web19h.yandex.ru (Yandex) with ESMTP id 58EE42E01141;
Thu, 3 Sep 2015 06:41:01 +0300 (MSK)
DKIM-Signature: <snipped>
Received: by web19h.yandex.ru with HTTP;
Thu, 03 Sep 2015 06:41:00 +0300
From: Dominic Ray <[email protected]>
To: <snipped>
Subject: DEPOSIT CERTIFICATE
MIME-Version: 1.0
Message-Id: <[email protected]>
X-Mailer: Yamail [ http://yandex.ru ] 5.0
Date: Thu, 03 Sep 2015 04:41:00 +0100
Content-Type: multipart/mixed;

kindly find the attached Deposit Certificate , we only need to pay for the other two documents , Letter of Administration and Certificate of Oath . I met the attorney today and i told him the money will get to him before Friday , in other words , i want you to send the $ 4,000 to him directly by using his name and address .

Name : OYOH UCHENNA IGWE
Address : ACCRA GHANA

Note : Use Money Gram to send , then send me the information to forward to him .

I want to you to understand that every money spent shall be refunded back to you before we share the funds , so be rest assured .

Dominic