James F. Entwistle [email protected]

[Tim Atem]

Header Analysis Quick Report
Originating IP: 41.58.12.63
Originating ISP: Swiftng
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.39.129 with SMTP id n123csp1020924ion;
Mon, 26 Oct 2015 04:16:19 -0700 (PDT)
X-Received: by 10.112.135.136 with SMTP id ps8mr16563481lbb.38.1445858179751;
Mon, 26 Oct 2015 04:16:19 -0700 (PDT)
Return-Path: <[email protected]>
Received: from srv001.stelmax.net (zaharchenko.tsua.net. [212.40.39.94])
by mx.google.com with ESMTPS id oi8si20443823lbb.152.2015.10.26.04.16.19
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 26 Oct 2015 04:16:19 -0700 (PDT)
Received-SPF: neutral (google.com: 212.40.39.94 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=212.40.39.94;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 212.40.39.94 is neither permitted nor denied by best guess record for domain of [email protected]) smtp.mailfrom=[email protected];
dmarc=fail (p=NONE dis=NONE) header.from=yahoo.co.uk
Received: from movielin by srv001.stelmax.net with local (Exim 4.84)
(envelope-from <[email protected]>)
id 1Zqfl3-0004UV-Ei
for <snipped>; Mon, 26 Oct 2015 13:16:10 +0200
To: <snipped>
Subject: U.S AMBASSADOR TO NIGERIA.//00
X-PHP-Script: movielink.ml/templates/beez3/mailerxd.php for 41.58.12.63
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: AMBASSADOR JAMES F. ENTWISTLE. <[email protected]>
Message-Id: <[email protected]>
Date: Mon, 26 Oct 2015 13:16:09 +0200
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - srv001.stelmax.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [585 32007] / [47 12]
X-AntiAbuse: Sender Address Domain - srv001.stelmax.net
X-Get-Message-Sender-Via: srv001.stelmax.net: authenticated_id: movielin/only user confirmed/virtual account not confirmed
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/movielin/public_html/templates/beez3/mailerxd.php
X-Source-Dir: movielink.tk:/public_html/templates/beez3

U.S AMBASSADOR TO NIGERIA
PLOT 1075 DIPLOMATIC DRIVE
CENTRAL
DISTRICT AREA, ABUJA

ATTN: BENEFICIARY.


AN OFFICIAL MEETING WAS HELD WITH THE PRESIDENT OF NIGERIA AND MINISTER OF
FINANCE CONCERNING THE UNPAID AND UNCLAIMED FUNDS TO FOREIGN
BENEFICIARIES,I WAS VERY MUCH CONCERNED WHEN I DISCOVERED THAT YOU HAVE
PAID MUCH MONEY AND YET HAVE NOT RECEIVE YOUR FUNDS.THIS IS WHY I DECIDED
TO HELP
I WILL BE COMING TO YOUR COUNTRY FOR AN OFFICIAL VISIT AND I WILL COME
ALONG WITH YOUR CONSIGNMENT BOX CONTAINING SUM OF $15.8 MILLION ALONG WITH
ME THROUGH UNITED STATES DIPLOMATIC MISSION TO THE COUNTRY. BUT I WILL NOT
GO THROUGH CUSTOMS BECAUSE AS U.S AMBASSADOR TO NIGERIA, AM U.S GOVERNMENT
AGENT AND HAVE THE VETO POWER TO PASS THROUGH CUSTOMS. JUST LIKE I HELPED
TWO PERSONS THAT RECEIVED THEIR FUNDS THIS YEAR 2014 THROUGH FEDEX COURIER
SERVICE.

PROVEN YOU THE TRUTH, TRACK THE BELOW TRACKING NUMBERS AND CONFIRM IT:

1.)WWW.TNT.COM
TRACKING NO: 889903160
2.)WWW.TNT.COM.COM
TRACKING NO: 889903160

ENSURE YOU TRACK IT FIRST TO CONFIRM BY YOUR SELF AND IMMEDIATELY AM
THROUGH WITH THE MEETINGS, I SHALL THEN PROCEED TO YOUR HOME,OK. PLEASE
SEND YOUR INFORMATION AS REQUESTED BELOW:-

1. YOUR FULL NAME
2. CELL PHONE NUMBER
3. ADDRESS WHERE YOU WANT ME TO BRING THE PACKAGE).

YOU REALLY PAID MUCH IN REGARDS OF THE DELIVERY AND THAT'S SURPRISED ME.
YOU ARE A VERY LUCKY AS I SHALL BE BRINGING IT MYSELF AND NOTHING CAN STOP
ME.
YOUR PACKAGE ($15.8M) MUST BE REGISTERED AS AN AMBASSADORIAL PACKAGE FOR
ME TO DEFEAT ALL ODDS AND THE COST OF REGISTERING IT IS $105.THE FEE MUST
BE PAID IN THE NEXT 50 HOURS VIA WESTERN UNION SO THAT ALL NECESSARY
ARRANGEMENT CAN BE MADE BEFORE TIME WILL BE AGAINST US.


SEND THE FEE VIA WESTERN UNION MONEY OR MONEY GRAM
TRANSFER:

RECEIVER'S NAME:....................JAMES DURU
ADDRESS:.............................. LAGOS, NIGERIA.
TEXT QUESTION:....................... IN GOD?
ANSWER:.............................. WE TRUST.
AMOUNT: ..............................$105.
SENDER NAME AND ADDRESS.

AS SOON AS YOU SEND THE FEE MAKE SURE YOU SEND ME
THE PAYMENT INFORMATION.I SHALL SEND MY FLIGHT SCHEDULE TO YOU.

ACCESS MY WEBSITE AND READ BIOGRAPHY:
http://nigeria.usembassy.gov/biography.html
EMAIL: { [email protected] }
TRULY,
AMBASSADOR JAMES F. ENTWISTLE.
U.S AMBASSADOR TO NIGERIA.

[Mortal]

Delivered-To:
Received: by 10.64.78.197 with SMTP id d5csp1942920iex;
Tue, 3 Nov 2015 04:10:41 -0800 (PST)
X-Received: by 10.112.135.9 with SMTP id po9mr13396196lbb.56.1446552641230;
Tue, 03 Nov 2015 04:10:41 -0800 (PST)
Return-Path: <[email protected]>
Received: from srv001.stelmax.net (zaharchenko.tsua.net. [212.40.39.94])
by mx.google.com with ESMTPS id xq8si17409735lbb.75.2015.11.03.04.10.40
for <>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 03 Nov 2015 04:10:41 -0800 (PST)
Received-SPF: neutral (google.com: 212.40.39.94 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=212.40.39.94;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 212.40.39.94 is neither permitted nor denied by best guess record for domain of [email protected]) smtp.mailfrom=[email protected];
dmarc=fail (p=NONE dis=NONE) header.from=yahoo.co.uk
Received: from movielin by srv001.stelmax.net with local (Exim 4.84)
(envelope-from <[email protected]>)
id 1ZtaQ5-0001if-0N
for ; Tue, 03 Nov 2015 14:10:33 +0200

U.S AMBASSADOR TO NIGERIA PLOT 1075 DIPLOMATIC DRIVE CENTRAL DISTRICT AREA, ABUJA ATTN: BENEFICIARY. AN OFFICIAL MEETING WAS HELD WITH THE PRESIDENT OF NIGERIA AND MINISTER OF FINANCE CONCERNING THE UNPAID AND UNCLAIMED FUNDS TO FOREIGN BENEFICIARIES,I WAS VERY MUCH CONCERNED WHEN I DISCOVERED THAT YOU HAVE PAID MUCH MONEY AND YET HAVE NOT RECEIVE YOUR FUNDS.THIS IS WHY I DECIDED TO HELP. I WILL BE COMING TO YOUR COUNTRY FOR AN OFFICIAL VISIT AND I WILL COME ALONG WITH YOUR CONSIGNMENT BOX CONTAINING SUM OF $15.8 MILLION ALONG WITH ME THROUGH UNITED STATES DIPLOMATIC MISSION TO THE COUNTRY. BUT I WILL NOT GO THROUGH CUSTOMS BECAUSE AS U.S AMBASSADOR TO NIGERIA, AM U.S GOVERNMENT AGENT AND HAVE THE VETO POWER TO PASS THROUGH CUSTOMS. JUST LIKE I HELPED TWO PERSONS THAT RECEIVED THEIR FUNDS THIS YEAR 2015 THROUGH FEDEX COURIER SERVICE. PROVEN YOU THE TRUTH, TRACK THE BELOW TRACKING NUMBERS AND CONFIRM IT: 1.)WWW.FEDEX.COM TRACKING NO: 395659915113418 2.)WWW.FEDEX.COM TRACKING NO: 797524131428 ENSURE YOU TRACK IT FIRST TO CONFIRM BY YOUR SELF AND IMMEDIATELY AM THROUGH WITH THE MEETINGS, I SHALL THEN PROCEED TO YOUR HOME,OK. PLEASE SEND YOUR INFORMATION AS REQUESTED BELOW:- 1. YOUR FULL NAME 2. CELL PHONE NUMBER 3. ADDRESS WHERE YOU WANT ME TO BRING THE PACKAGE). YOU REALLY PAID MUCH IN REGARDS OF THE DELIVERY AND THAT'S SURPRISED ME. YOU ARE A VERY LUCKY AS I SHALL BE BRINGING IT MYSELF AND NOTHING CAN STOP ME. YOUR PACKAGE ($15.8M) MUST BE REGISTERED AS AN AMBASSADORIAL PACKAGE FOR ME TO DEFEAT ALL ODDS AND THE COST OF REGISTERING IT IS $305.THE FEE MUST BE PAID IN THE NEXT 50 HOURS VIA WESTERN UNION SO THAT ALL NECESSARY ARRANGEMENT CAN BE MADE BEFORE TIME WILL BE AGAINST US. SEND THE FEE VIA WESTERN UNION MONEY OR MONEY GRAM TRANSFER: RECEIVER'S NAME:....................JAMES DURU ADDRESS:.............................. LAGOS, NIGERIA. TEXT QUESTION:....................... IN GOD? ANSWER:.............................. WE TRUST. AMOUNT: ..............................$305. SENDER NAME AND ADDRESS. AS SOON AS YOU SEND THE FEE MAKE SURE YOU SEND ME THE PAYMENT INFORMATION.I SHALL SEND MY FLIGHT SCHEDULE TO YOU. ACCESS MY WEBSITE AND READ BIOGRAPHY: http://nigeria.usembassy.gov/biography.html EMAIL: { [email protected] } TRULY, AMBASSADOR JAMES F. ENTWISTLE. U.S AMBASSADOR TO NIGERIA. U.S AMBASSADOR FUND NOTIFICATION

[Tim Atem]

Delivered-To: <snipped>
Received: by 10.55.209.196 with SMTP id o65csp526739qkl;
Tue, 10 Nov 2015 02:42:54 -0800 (PST)
X-Received: by 10.107.185.196 with SMTP id j187mr2940868iof.151.1447152174488;
Tue, 10 Nov 2015 02:42:54 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm39-vm0.bullet.mail.ne1.yahoo.com (nm39-vm0.bullet.mail.ne1.yahoo.com. [98.138.229.160])
by mx.google.com with ESMTPS id 79si3830864ior.196.2015.11.10.02.42.54
for <<snipped>>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Tue, 10 Nov 2015 02:42:54 -0800 (PST)
Received-SPF: neutral (google.com: 98.138.229.160 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=98.138.229.160;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 98.138.229.160 is neither permitted nor denied by best guess record for domain of [email protected]) smtp.mailfrom=[email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.co.uk
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm39.bullet.mail.ne1.yahoo.com with NNFMP; 10 Nov 2015 10:42:53 -0000
Received: from [98.138.226.177] by nm39.bullet.mail.ne1.yahoo.com with NNFMP; 10 Nov 2015 10:40:13 -0000
Received: from [212.82.98.54] by tm12.bullet.mail.ne1.yahoo.com with NNFMP; 10 Nov 2015 10:40:12 -0000
Received: from [212.82.98.113] by tm7.bullet.mail.ir2.yahoo.com with NNFMP; 10 Nov 2015 10:40:11 -0000
Received: from [127.0.0.1] by omp1050.mail.ir2.yahoo.com with NNFMP; 10 Nov 2015 10:40:11 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 217.12.9.11; Tue, 10 Nov 2015 10:40:11 +0000
Date: Tue, 10 Nov 2015 10:40:10 +0000 (UTC)
From: JAMES AMBASSADOR fentwestus <[email protected]>
Reply-To:
JAMES AMBASSADOR fentwestus <[email protected]>
To: <<snipped>>
Cc: <<snipped>>
Message-ID: <[email protected]>
Subject: ATTN:
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_3947405_556969978.1447152010907"
References: <1839882714.3947406.1447152010907.JavaMail.yahoo.ref@mail.yahoo.com>

ATTN:

I CONFIRM RECEIPT OF YOUR E-MAIL TODAY REGARDING THE DELIVERY OF YOUR CONSIGNMENT,WITH QUESTION WE RECOVER THIS FUND FROM SCAMMERS YOU ARE ONE OF THE SCAM VICTIM SO AS U.S AMBASSADOR I DECIDED TO BRING THE MONEY ON MY HAND THE ONLY FEE YOU ARE TO PAY IS $305 FOR YOUR REGISTERING YOUR CONSIGNMENT.

I WANT TO INFORM YOU THAT I HAVE SCHEDULE AND WILL BOARD MY FLIGHT ON SATURDAY BEING 14th NOVEMBER.,2015 AND IT IS COMPULSORY YOUR CONSIGNMENT IS BEEN REGISTERED BEFORE MY TRIP.

YOUR PACKAGE MUST BE SECURE AND REGISTERED FIRSTLY AS AN AMBASSADORIAL PACKAGE FOR ME TO DEFEAT AND CLEAR ALL ODDS AND THE COST OF REGISTERING IT IS $305 ONLY AND THESE FEE MUST BE PAID.

ALSO THE FOLLOWING ARE THE DETAILS OF YOUR CONSIGNMENT AND YOU MUST NOT DISCLOSE THESE INFO. TO ANYONE FOR SAFETY PURPOSE OF YOUR BOX. REFERENCE NO: XH00/478322/14CONSIGNMENT TAG NO: D-3607KCONSIGNMENT SIZE: 73.2"Lx 50"W x 60.8"HWEIGHT: 190Kg.TYPE OF CONSIGNMENT: DIPLOMATIC PIN CODE: 247078W

ATTACHED FILE IS MY WORKING ID CARD .WITH THE APPOINTMENT LETTER FROM AMERICA PRESIDENT.

MAINTAIN THE BELOW PAYMENT PROTOCOL SO THAT I WILL REGISTER YOUR CONSIGNMENT BEFORE MY TRIP WILL COMMENCE. SO POSSIBLY PAY THE $305 ONLY TODAY OR BEFORE 7TH.NOVEMBER,2015 TO ENABLE US CONFIRM THE PAYMENT IN TIME AND FORWARD THE DETAILS TO ME SO THAT I WILL INSTRUCT MY SECRETARY TO PICK IT UP AND REGISTER IT WITH FEDEX COMPANY.

SEND THE FEE VIA WESTERN UNION MONEY OR MONEY GRAM TRANSFER FOR FASTER CONFIRMATION:

RECEIVER'S NAME:....................JAMES DURU
ADDRESS:.............................. LAGOS, NIGERIA.
TEXT QUESTION:....................... IN GOD?
ANSWER:.............................. WE TRUST.
AMOUNT: ..............................$305

MY FLIGHT WILL BE ON SATURDAY AND I WILL BE WAITING FOR THE PAYMENT DETAILS IF POSSIBLE TODAY

TRULY,

AMBASSADOR JAMES F. ENTWISTLE.

[Tim Atem]

Delivered-To: <snipped>
Received: by 10.55.209.196 with SMTP id o65csp452405qkl;
Fri, 20 Nov 2015 04:07:20 -0800 (PST)
X-Received: by 10.107.3.163 with SMTP id e35mr12473119ioi.157.1448021240582;
Fri, 20 Nov 2015 04:07:20 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm34-vm5.bullet.mail.ne1.yahoo.com (nm34-vm5.bullet.mail.ne1.yahoo.com. [98.138.229.85])
by mx.google.com with ESMTPS id t10si3177719igr.35.2015.11.20.04.07.20
for <<snipped>>
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 20 Nov 2015 04:07:20 -0800 (PST)
Received-SPF: neutral (google.com: 98.138.229.85 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=98.138.229.85;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 98.138.229.85 is neither permitted nor denied by best guess record for domain of [email protected]) smtp.mailfrom=[email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.co.uk
DKIM-Signature: <snipped>
Received: from [127.0.0.1] by nm34.bullet.mail.ne1.yahoo.com with NNFMP; 20 Nov 2015 12:07:20 -0000
Received: from [98.138.101.131] by nm34.bullet.mail.ne1.yahoo.com with NNFMP; 20 Nov 2015 12:04:22 -0000
Received: from [212.82.98.52] by tm19.bullet.mail.ne1.yahoo.com with NNFMP; 20 Nov 2015 12:04:21 -0000
Received: from [212.82.98.82] by tm5.bullet.mail.ir2.yahoo.com with NNFMP; 20 Nov 2015 12:04:21 -0000
Received: from [127.0.0.1] by omp1019.mail.ir2.yahoo.com with NNFMP; 20 Nov 2015 12:04:21 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 217.12.9.13; Fri, 20 Nov 2015 12:02:41 +0000
Date: Fri, 20 Nov 2015 12:02:40 +0000 (UTC)
From: JAMES AMBASSADOR fentwestus <[email protected]>
Reply-To:
JAMES AMBASSADOR fentwestus <[email protected]>
To: <<snipped>>
Cc: <<snipped>>
Message-ID: <[email protected]>
Subject: Re: ATTN:
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
References: <1847937574.12651016.1448020960602.JavaMail.yahoo.ref@mail.yahoo.com>
Content-Length: 20908

ATTN:

I CONFIRM RECEIPT OF YOUR E-MAIL TODAY REGARDING THE DELIVERY OF YOUR CONSIGNMENT,WITH QUESTION YES I RECICVE YOUR MASSAGE BUT I WILL ADVICE YOU AS MY FOLLOW CITIZENS CAN YOU TELL ME THE TAPE OF BUSINESS YOU AND PASTOR SMITH IS DOING BECAUSE I HAVE RECICVE MANY COMPLANE FROM AMERICAN CONCENING THE SCAM IN THIS CONUTRY SO MY BROTHER I ADVICE YOU TO OPEN UP FOR ME FOR YOUR OWN GOOD.

I DID NOT KNOW YOU IN PERSON BUT I ONLY SEE YOUR DATA AND THE AMOUNT YOU HAVE SPEND I WAS SO SAD WHEN I RECICVE THE INFORMATION DON T BE SUPRISE THE YOU WILL KEEP ON PAYING FEE WITH OUT END SO I ADVICE YOU TO PROEED AND SEND THE $305 I TOLD YOU TO REGISTER YOUR CONSIGMENT.

I WANT TO INFORM YOU THAT I HAVE SCHEDULE AND WILL BOARD MY FLIGHT ON TURSDAY BEING 24th NOVEMBER.,2015 AND IT IS COMPULSORY YOUR CONSIGNMENT IS BEEN REGISTERED BEFORE MY TRIP.

YOUR PACKAGE MUST BE SECURE AND REGISTERED FIRSTLY AS AN AMBASSADORIAL PACKAGE FOR ME TO DEFEAT AND CLEAR ALL ODDS AND THE COST OF REGISTERING IT IS $305 ONLY AND THESE FEE MUST BE PAID.


TRULY,

AMBASSADOR JAMES F. ENTWISTLE