Natwest Bank <[email protected]>

Header Analysis Quick Report<br>Originating IP: 207.46.131.186<br>Originating ISP: Microsoft Hosting<br> City: Westville<br>Country of Origin: United States<br>* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.220.177.2 with SMTP id bg2csp46249vcb;
Wed, 27 Nov 2013 19:20:57 -0800 (PST)
X-Received: by 10.66.26.74 with SMTP id j10mr18759378pag.171.1385608856808;
Wed, 27 Nov 2013 19:20:56 -0800 (PST)
Return-Path: <[email protected]>
Received: from company.mail ([112.213.88.157])
by mx.google.com with ESMTP id pt8si35525629pac.76.2013.11.27.19.20.51
for <multiple recipients>;
Wed, 27 Nov 2013 19:20:56 -0800 (PST)
Received-SPF: neutral (google.com: 112.213.88.157 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=112.213.88.157;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 112.213.88.157 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Message-Id: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13)
X-Spam-Level: ***
X-Spam-Status: No, score=3.0 required=5.0 tests=ADVANCE_FEE_1,ADVANCE_FEE_2,
ADVANCE_FEE_3,FORGED_MUA_OUTLOOK,MAILTO_TO_SPAM_ADDR,MISSING_HEADERS,
TO_CC_NONE autolearn=no version=3.1.8
X-Spam-Report:
* 0.2 MISSING_HEADERS Missing To: header
* 0.3 MAILTO_TO_SPAM_ADDR URI: Includes a link to a likely spammer email
* 1.8 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
* 0.1 TO_CC_NONE No To: or Cc: header
* 0.0 ADVANCE_FEE_1 Appears to be advance fee fraud (Nigerian 419)
* 0.6 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
* 0.0 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Received: from User by company.mail
(MDaemon PRO v9.6.2)
with ESMTP id md50000027502.msg;
Thu, 28 Nov 2013 10:20:39 +0700
Reply-To: <[email protected]>
From: "Natwest Bank London"<[email protected]>
Subject: Payment Solution
Date: Thu, 28 Nov 2013 03:20:46 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Authenticated-Sender: [email protected]
X-MDRemoteIP: 207.46.131.186
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
X-Spam-Processed: company.mail, Thu, 28 Nov 2013 10:20:40 +0700

From the Desk of Mrs. Pauline Cook
Natwest Bank
St. Paul's
Juxon House
GB - 98 St. Paul's Churchyard EC4M 8BU
London, United Kingdom

Dearest Customer,

RE: INSTRUCTIONS TO CREDIT YOUR BANK ACCOUNT WITH US$5,500,000.00

The management of the Natwest Bank United Kingdom writes to inform you of your
long over due payment that has been lying wait in the treasury department of the
Natwest Bank for payment.

With regards to the approval of your Approval of this payment as confirmed by
the Legal Department of the Natwest Bank United Kingdom; you are
hereby directed to contact Mr. Charles Austin for immediate payment as your payment
officer with the contact information below:

Contact Person: Mr. Charles Austin
Email: [email protected]
Tel + 44 703 192 2069

Be further informed that the management of Natwest Bank has authorized Mr.
Charles Austin to wire your funds without any delay as soon as you provide him
with the following information:

Full name:
Current occupation:
Home address:
Country:
Mobile phone:
Bank Details:

You are therefore authorized to reconfirm to the telex department of
the Natwest Bank United Kingdom your complete Personal Information and Account
Information? to enable us carry out your transfer accordingly.

Contact our office as soon as possible on email or contact Charles Austin for more
details on your transfer.

Thank you, for your understand and patience.

Mrs. Pauline Cook