Central Bank of Nigeria <[email protected]>

Header Analysis Quick Report<br>Originating IP: 99.66.28.225<br>Originating ISP: At&t Internet Services<br> City: Anaheim<br>Country of Origin: United States<br>* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.112.19.132 with SMTP id f4csp52773lbe;
Tue, 28 Jan 2014 16:42:03 -0800 (PST)
X-Received: by 10.229.179.5 with SMTP id bo5mr7442598qcb.21.1390956122328;
Tue, 28 Jan 2014 16:42:02 -0800 (PST)
Return-Path: <[email protected]>
Received: from lennier.cc.vt.edu (lennier.cc.vt.edu. [198.82.162.213])
by mx.google.com with ESMTPS id n8si313875qga.69.2014.01.28.16.42.01
for <multiple recipients>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Tue, 28 Jan 2014 16:42:02 -0800 (PST)
Received-SPF: fail (google.com: domain of [email protected] does not
designate 198.82.162.213 as permitted sender)
client-ip=198.82.162.213;
Authentication-Results: mx.google.com;
spf=hardfail (google.com: domain of [email protected] does not
designate 198.82.162.213 as permitted sender)
[email protected]
Received: from mr5.cc.vt.edu (mr5.cc.vt.edu [198.82.141.27])
by lennier.cc.vt.edu (8.13.8/8.13.8 ) with ESMTP id s0T0fVeJ022284;
Tue, 28 Jan 2014 19:41:31 -0500
Received: from User (adsl-99-66-28-225.dsl.lsan03.sbcglobal.net [99.66.28.225])
by mr5.cc.vt.edu (8.14.4/8.14.4) with SMTP id s0T0fOcp001179;
Tue, 28 Jan 2014 19:41:26 -0500
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "BAN KI MOON"<[email protected]>
Subject: Intl. Wire Transfer/Telex Department
Date: Tue, 28 Jan 2014 16:41:40 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Flag: YES
X-Spam-Status: Yes, score=56.9 required=5.0 tests=ADVANCE_FEE_3_NEW,
ADVANCE_FEE_4_NEW,ADVANCE_FEE_5_NEW,AXB_XMAILER_MIMEOLE_OL_024C2,
DATE_IN_FUTURE_96_Q,DOS_OE_TO_MX,FORGED_MUA_OUTLOOK,FROM_MISSPACED,
FROM_MISSP_DYNIP,FROM_MISSP_EH_MATCH,FROM_MISSP_MSFT,FROM_MISSP_REPLYTO,
FROM_MISSP_USER,FSL_CTYPE_WIN1251,FSL_HELO_NON_FQDN_1,FSL_MISSP_REPLYTO,
FSL_NEW_HELO_USER,HK_SCAM_S4,MISSING_HEADERS,MISSING_MID,NSL_RCVD_FROM_USER,
RCVD_IN_BRBL_LASTEXT,RDNS_DYNAMIC,REPLYTO_WITHOUT_TO_CC,TO_NO_BRKTS_FROM_MSSP,
TO_NO_BRKTS_MSFT,TVD_PH_BODY_META,T_FROM_MISSP_DKIM autolearn=disabled
version=3.3.1
X-Spam-Report:
* 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
* [99.66.28.225 listed in bb.barracudacentral.org]
* 0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1
* 4.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
* 3.5 NSL_RCVD_FROM_USER Received from User
* 2.7 DATE_IN_FUTURE_96_Q Date: is 4 days to 4 months after Received: date
* 1.2 MISSING_HEADERS Missing To: header
* 3.1 HK_SCAM_S4 BODY: HK_SCAM_S4
* 0.4 RDNS_DYNAMIC Delivered to internal network by host with
* dynamic-looking rDNS
* 0.1 MISSING_MID Missing Message-Id: header
* 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
* 4.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
* 0.4 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
* 2.2 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
* 2.5 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
* 1.7 FROM_MISSP_USER From misspaced, from "User"
* 3.6 TVD_PH_BODY_META TVD_PH_BODY_META
* 2.1 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
* 1.1 FROM_MISSP_REPLYTO From misspaced, has Reply-To
* 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
* 1.6 FROM_MISSPACED From: missing whitespace
* 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
* 1.1 FROM_MISSP_EH_MATCH From misspaced, matches envelope
* 2.1 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
* 3.5 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
* 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
* 3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers
* 0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
* 3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
X-Spam-Level: **************************************************
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mr5.cc.vt.edu

Int'l. Wire Transfer/Telex Department,
Central Bank Of Nigeria,(CBN)
Office Number:+23412130615 Direct Telepone:+234 8032155988
Our Ref: CBN/IRD/CBX/021/09
Honestly after a serious thought, I have decided to personally reach
you directly because I do not have anything against you, but your so
called representatives working with you to realize the remittance of
your payment. However, have you ever wondered why you have been going
this vicious circle over the past years with respect to having your
fund paid to you without any success? It is possible that you were
informed that your payment was brought to me for finalization, neither
were you informed that I am the person frustrating every move to get
your fund remitted to your local bank account in your country, I can
assure you that this yetanother deceit on the part of your
representative(s).Well, like I said earlier to you, I have nothing
against you or your payment but I'm only trying to protect my interest
also. I do not want to mention names here, but am certain you are
aware of whom I am referring to having not received your fund.
I am the Director, International Wire Transfer/Telex
Department,Central Bank of Nigeria, the apex bank in Nigeria. Some
time in the past a representative of yours approached me through a
friend of mine who works with one of the Government Ministries here
and requested that I assist him conclude a money transfer deal having
you as the beneficiary and we all agreed.According to him, he wanted
to use this strategy to transfer a huge amount of US Dollars by
presenting your name as"Beneficiary" whose fund has not been paid.
Although we agreed that once I did that, he would give me 20% of the
total fund and he will equally give me your contact information before
I release the fund to your account. When he saw that I have programmed
your fund for onward transfer and your name has been approved among
the list of those to be paid as beneficiary, instead of him letting me
have your contact information to enable me regulate the transfer of
funds and confirm when it arrive in your account to enable me send to
you my private account details for my share of the 20% as was agreed
previously, what he does was to start avoiding me and which
thereafter,resorted to threats,because of that, I immediately deleted
your payment initializing code (PIC) from the list of those to be
paid, and this made it very IMPOSSIBLE for the transfer to be
completed to your account.
However, he your local representative became very angry when he came
to discovered i was smarter than his plots could not work out as he
wrongly wished. What he did was to start looking for other means of
trying to bribe other junior officers to see how they could assist him
secure approval to enable them transfer the money to you but all their
efforts was to NO avail. Is it not so funny my good friend, that you
as a beneficiary is being asked to pay several statutory fees over and
over
without your fund being transfered to you as well expected. Well, your
fund is right here with us and am 100% responsible for the delay and
obstructions of completing the transfer of funds to your account
because of the breach of the gentleman agreement between me and your
representative. If you doubt what I have just told you now, then go
ahead and pay any amount he may oblige you pay and thereafter, he will
subject you into another form of tax payment and it goes on and on
WITHOUT SUCCESS. I did not reveal the payment initializing code (PIC)
to any junior staff of the bank even till now because I want to avoid
further betrayal hence no office can release the payment. I actually
have the power to remit the fund to your account but strictly on terms
and conditions. But, since I have gotten your email address through
the bank data base network,I decided to contact you directly to
resolve issues with you in other to allivate you from the long
suffering subjected to you by yo
AND AGAIN BEAR IN MIND YOUR PAYMENT IS NOT IN ANY OFFSHORE PAYMENT
CENTER FOR NOW and YOU WILL NEVER RECEIVE YOUR PAYMENT FROM ANY
OFFSHORE CENTERS FOR NOW AS FOLLOWS LONDON, SPAIN, HOLLAND, DUBAI, not
even the United States of America or anywhere outside Nigeria BECAUSE
THAT IS WHAT THEY MAY HAVE TOLD YOU. Now if you want us (you & I) to
work together for me to conclude the remittance to your account, these
are my conditions.
(I). You must keep my information to you in this correspondence highly
secret because I don't want to get involve with he,your local
representative again in my life and I will have 20% of the money if
successfully transfere to your local bank account because it is only
two of us in connection to logical remittance of the fund to you.
(ii). You MUST assure me that you will not betray me at last and my
own share will be safe until when I will redirect you to lodged my
part of the fund into an account that i will forward to you.
(iii) As you have seen, it will be useless and mere waste of money if
you continue with your local representative and i can assure you that
with trust and confidence we will conclude the transaction with utmost
secrecy and confidentiality if you wish to adhere to my directives and
instructions. If these conditions are acceptable to you, contact me as
soon as possible to let us finalize all the arrangement and conclude
the remittance of the fund to you immediately without any other delay
attached.
I will give you more important details once I hear from you based on
if you promise to keep away from your local representative and handle
this matter with utmost confidentiality because I want to transfer the
money without the knowledge of any other officer of the bank or even
without the knowledge of your local representative .
May the peace of our Jesus Christ be upon you.
Faithfully Yours In Him.
Dr. Rev. HENRY MORGAN
Int'l. Wire Transfer/Telex Department,
Central Bank of Nigeria

234 8032155988


[email protected]

From: Rev. John Okolie <[email protected]>
Date: Sun, Feb 2, 2014 at 4:47 AM
Subject: READ AND UNDERSTAND SCAM VICTIM
To: <snipped>


Int'l. Wire Transfer/Telex Department,
Central Bank Of Nigeria,(CBN)
Office Number:+23412130615 Direct Telepone:+234 8033435257
Our Ref: CBN/IRD/CBX/021/09

Honestly after a serious thought, I have decided to personally reach you directly because I do not have anything against you, but your so called representatives working with you to realize the remittance of your payment. However, have you ever wondered why you have been going this vicious circle over the past years with respect to having your fund paid to you without any success? It is possible that you were informed that your payment was brought to me for finalization, neither were you informed that I am the person frustrating every move to get your fund remitted to your local bank account in your country, I can assure you that this yetanother deceit on the part of your representative(s).Well, like I said earlier to you, I have nothing against you or your payment but I'm only trying to protect my interest also. I do not want to mention names here, but am certain you are aware of whom I am referring to having not received your fund.

I am the Director, International Wire Transfer/Telex Department,Central Bank of Nigeria, the apex bank in Nigeria. Some time in the past a representative of yours approached me through a friend of mine who works with one of the Government Ministries here and requested that I assist him conclude a money transfer deal having you as the beneficiary and we all agreed.According to him, he wanted to use this strategy to transfer a huge amount of US Dollars by presenting your name as⌠Beneficiary■ whose fund has not been paid.

Although we agreed that once I did that, he would give me 20% of the total fund and he will equally give me your contact information before I release the fund to your account. When he saw that I have programmed your fund for onward transfer and your name has been approved among the list of those to be paid as beneficiary, instead of him letting me have your contact information to enable me regulate the transfer of funds and confirm when it arrive in your account to enable me send to you my private account details for my share of the 20% as was agreed previously, what he does was to start avoiding me and which thereafter,resorted to threats,because of that, I immediately deleted your payment initializing code (PIC) from the list of those to be paid, and this made it very IMPOSSIBLE for the transfer to be completed to your account.

However, he your local representative became very angry when he came to discovered i was smarter than his plots could not work out as he wrongly wished. What he did was to start looking for other means of trying to bribe other junior officers to see how they could assist him secure approval to enable them transfer the money to you but all their efforts was to NO avail. Is it not so funny my good friend, that you as a beneficiary is being asked to pay several statutory fees over and over

without your fund being transfered to you as well expected. Well, your fund is right here with us and am 100% responsible for the delay and obstructions of completing the transfer of funds to your account because of the breach of the gentleman agreement between me and your representative. If you doubt what I have just told you now, then go ahead and pay any amount he may oblige you pay and thereafter, he will subject you into another form of tax payment and it goes on and on WITHOUT SUCCESS. I did not reveal the payment initializing code (PIC) to any junior staff of the bank even till now because I want to avoid further betrayal hence no office can release the payment. I actually have the power to remit the fund to your account but strictly on terms and conditions. But, since I have gotten your email address through the bank data base network,I decided to contact you directly to resolve issues with you in other to allivate you from the long suffering s! ubjected to you by you.!
AND AGAIN BEAR IN MIND YOUR PAYMENT IS NOT IN ANY OFFSHORE PAYMENT CENTER FOR NOW and YOU WILL NEVER RECEIVE YOUR PAYMENT FROM ANY OFFSHORE CENTERS FOR NOW AS FOLLOWS LONDON, SPAIN, HOLLAND, DUBAI, not even the United States of America or anywhere outside Nigeria BECAUSE THAT IS WHAT THEY MAY HAVE TOLD YOU. Now if you want us (you & I) to work together for me to conclude the remittance to your account, these are my conditions.

(I). You must keep my information to you in this correspondence highly secret because I don't want to get involve with he,your local representative again in my life and I will have 20% of the money if successfully transfere to your local bank account because it is only two of us in connection to logical remittance of the fund to you.

(ii). You MUST assure me that you will not betray me at last and my own share will be safe until when I will redirect you to lodged my part of the fund into an account that i will forward to you.

(iii) As you have seen, it will be useless and mere waste of money if you continue with your local representative and i can assure you that with trust and confidence we will conclude the transaction with utmost secrecy and confidentiality if you wish to adhere to my directives and instructions. If these conditions are acceptable to you, contact me as soon as possible to let us finalize all the arrangement and conclude the remittance of the fund to you immediately without any other delay attached.

I will give you more important details once I hear from you based on if you promise to keep away from your local representative and handle this matter with utmost confidentiality because I want to transfer the money without the knowledge of any other officer of the bank or even without the knowledge of your local representative .

May the peace of our Jesus Christ be upon you.

Faithfully Yours In Him.

Rev. John Okolie
Int'l. Wire Transfer/Telex Department,
Central Bank of Nigeria
+234 8033435257