by HillBilly
From: Maurice Edward BrownReceived: from [154.118.4.82] (port=52741 helo=User)
C/o Cargo Unit
JFK International Airport
New York USA
Email: [email protected]
Attn: Beneficiary
Confirmation required on package delivery.
This is to notify you of a consignment/package that arrived and was deposited with the cargo unit of the JFK International Airport New York USA, in your favor and with this email as consignee's contact email address. consequently, we have not received your message or word giving proper directives and consent on delivery.
presently we are confronted with Mr. Ian John Jackson, a black United Kingdom (UK) citizen and Mrs. Joan Bailey from USA requesting for the claim of your Consignment/package valued at $25 Million.
This your consignment/package has been deposited in our security vault for safe keeping by the United Nations Debt Re-conciliation commission pending your contact to us for the release via a proper delivery to you at your preferred address, Direct telephone number where you can be reached
Please confirm this information to us now because Mr. Ian John Jackson has presented an affidavit of claim in the respect of the consignment and has been seeking to pay us our delivery and handling charges for your consignment package to be released and delivered to his own address on your behalf.
An urgent confirmation from you on this matter is very important.
Thank you.
Regards,
Maurice E. Brown
by idtbs-hosting1.idola.net.id with esmtpa (Exim 4.87)
(envelope-from <[email protected]>)
id 1azpTr-0004mn-F6; Tue, 10 May 2016 01:00:32 +0700
Reply-To: <[email protected]>
From: "JFK Cargo Unit"<[email protected]>
Subject: Confirmation required on package delivery.
Date: Mon, 9 May 2016 11:00:32 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - idtbs-hosting1.idola.net.id
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - cedarcresthospitals.com
X-Get-Message-Sender-Via: idtbs-hosting1.idola.net.id: authenticated_id: [email protected]
X-Authenticated-Sender: idtbs-hosting1.idola.net.id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
Bcc:
Return-Path: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 09 May 2016 18:00:48.0949 (UTC) FILETIME=[B7C65650:01D1AA1C]
* 154.118.4.82 Spectranet Lagos Nigeria
fwiw, I have a hard time believing that the domain it is sent from is real. While it seems to have been registered in 2009, the information in the registrant fields are all fake/ virtual, and it appears the admin fields are more accurate.
canonical name cedarcresthospitals.com.
aliases
addresses 5.101.168.42
Domain Whois record
Queried whois.internic.net with "dom cedarcresthospitals.com"...
Domain Name: CEDARCRESTHOSPITALS.COM
Registrar: ENOM, INC.
Sponsoring Registrar IANA ID: 48
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.KNOWROUND.NET
Name Server: NS2.KNOWROUND.NET
Status: ok https://icann.org/epp#ok
Updated Date: 12-apr-2016
Creation Date: 14-jul-2009
Expiration Date: 14-jul-2016
>>> Last update of whois database: Mon, 09 May 2016 21:53:15 GMT <<<
For more information on Whois status codes, please visit https://icann.org/epp
Queried whois.enom.com with "cedarcresthospitals.com"...
Domain Name: CEDARCRESTHOSPITALS.COM
Registry Domain ID: 1562368722_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.enom.com
Registrar URL: www.enom.com
Updated Date: 2015-07-09T05:05:24.00Z
Creation Date: 2009-07-14T19:27:00.00Z
Registrar Registration Expiration Date: 2016-07-14T19:27:39.00Z
Registrar: ENOM, INC.
Registrar IANA ID: 48
Reseller: NAMECHEAP.COM
Domain Status: ok https://www.icann.org/epp#ok
Registry Registrant ID:
Registrant Name: NAMECHEAP.COM NAMECHEAP.COM
Registrant Organization: NAMECHEAP.COM
Registrant Street: 8939 S. SEPULVEDA BLVD. #110 - 732
Registrant City: WESTCHESTER
Registrant State/Province: CA
Registrant Postal Code: 90045
Registrant Country: US
Registrant Phone: +1.5555555555
Registrant Phone Ext:
Registrant Fax: +1.5555555555
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: CEDARCREST ORTHOPAEDIC CLINICS LTD
Admin Organization:
Admin Street: 4 AMURIE OMANZE STREET
Admin Street: OFF LADOKE AKINTOLA BOULEVARD
Admin City: GARKI II
Admin State/Province: ABUJA
Admin Postal Code: P O BOX 10517
Admin Country: NG
Admin Phone: +234.7026681588
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: [email protected]
Find complete email headers here : http://www.ip-adress.com/faq/view_email_header/
or http://whatismyipaddress.com/find-headers
How to post photos in the forum here : http://www.scamwarners.com/forum/viewto ... =28&t=3219
or http://whatismyipaddress.com/find-headers
How to post photos in the forum here : http://www.scamwarners.com/forum/viewto ... =28&t=3219

