by Faizan Docherty
Wed Mar 25, 2015 12:56 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 209.85.223.193
Originating ISP: Google
City: Farmington
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline
Return-Path: <[email protected]>
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
by sloti33d1t14 (Cyrus 2.5.0-git-fastmail-10650) with LMTPA;
Sun, 22 Mar 2015 23:14:53 -0400
X-Sieve: CMU Sieve 2.4
X-Spam: high
X-Spam-score: 14.0
X-Spam-hits: BAYES_60 1.5, DEAR_BENEFICIARY 3.4, FREEMAIL_ENVFROM_END_DIGIT 0.25,
FREEMAIL_FROM 0.001, FREEMAIL_REPLY 1, HK_SCAM_N3 0.696,
LOTS_OF_MONEY 0.001, ME_419_MANY0 1.5, ME_419_MANY1 1.5,
MONEY_FORM_SHORT 2.115, MONEY_FRAUD_3 2.735, RCVD_IN_DNSWL_LOW -0.7,
SPF_PASS -0.001, T_FILL_THIS_FORM_SHORT 0.01, LANGUAGES en,
BAYES_USED global, SA_VERSION 3.3.2
X-Spam-source: IP='209.85.223.193', Host='mail-ie0-f193.google.com', Country='US',
FromHeader='com', MailFrom='com'
X-Spam-charsets: plain='UTF-8'
X-Resolved-to: <snipped>
X-Delivered-to: <snipped>
X-Mail-from: [email protected]
Received: from mx6 ([10.202.2.205])
by compute3.internal (LMTPProxy); Sun, 22 Mar 2015 23:14:53 -0400
Received: from mx6.messagingengine.com (localhost [127.0.0.1])
by mx6.nyi.internal (Postfix) with ESMTP id BD486B20D7F
for <snipped>; Sun, 22 Mar 2015 23:14:52 -0400 (EDT)
Received: from mx6.nyi.internal (localhost [127.0.0.1])
by mx6.messagingengine.com (Authentication Milter) with ESMTP
id FC6FE86B7A7.8B97AB20D78;
Sun, 22 Mar 2015 23:14:52 -0400
Authentication-Results: mx6.messagingengine.com;
dkim=pass (2048-bit rsa key) header.d=gmail.com [email protected] header.b=llfDyCEO;
dmarc=pass header.from=gmail.com;
spf=pass [email protected] smtp.helo=mail-ie0-f193.google.com
Received-SPF: pass (gmail.com ... _spf.google.com: Sender is authorized to use '[email protected]' in 'mfrom' identity (mechanism 'include:_netblocks.google.com' matched)) receiver=mx6.messagingengine.com; identity=mailfrom; envelope-from="[email protected]"; helo=mail-ie0-f193.google.com; client-ip=209.85.223.193
Received: from mail-ie0-f193.google.com (mail-ie0-f193.google.com [209.85.223.193])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(No client certificate requested)
by mx6.messagingengine.com (Postfix) with ESMTPS id 8B97AB20D78
for <snipped>; Sun, 22 Mar 2015 23:14:52 -0400 (EDT)
Received: by iecrd18 with SMTP id rd18so2948818iec.3
for <snipped>; Sun, 22 Mar 2015 20:14:51 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.50.29.109 with SMTP id j13mr11827388igh.2.1427080491138;
Sun, 22 Mar 2015 20:14:51 -0700 (PDT)
Received: by 10.50.231.166 with HTTP; Sun, 22 Mar 2015 20:14:51 -0700 (PDT)
Date: Sun, 22 Mar 2015 19:14:51 -0800
Message-ID: <CANTUi2ZFQyXaX-BDGvXUVo_OQUXvh=WvDo9Mafr17UhpZ1agAQ@mail.gmail.com>
Subject: Subject: Re: Abandoned Package/Consignment At John F. Kennedy
International Airport, New York USA,
From: william clifford <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: Abandoned Package/Consignment At John F. Kennedy
International Airport, New York USA,
Attn: Beneficiary.
I am William Clifford, from the Office of Inspection Unit/United
Nations Agency in John F. Kennedy International Airport, New York
USA. During my
recent routine check at the Airport Storage/vault on withheld
packages, I discovered an abandoned shipment by a Diplomat from London
and Africa, when scanned it revealed an undisclosed sum of money in
two Metal Trunk Boxes weighing approximately 25kg each of which some
people
are coming after this package/consignment to clam it in your name.
The package/consignment was abandoned because the Contents was not
properly declared by the consignee as “MONEY” rather it was declared
as personal effect to avoid interrogation and also the inability of
the diplomat to pay for the INTERNATIONAL PACKAGE/CONSIGNMENT MONEY
MOVEMENT Charges Before bringing in the package/consignment into US
and we refused to
return back the package/consignment where it came from since, we have
already received it in the USA. On my assumption, each of the
package/consignment contain not less than $5 Million to $5.5Million
even
above and the consignment is still left in our Storage House here at
the John F.Kennedy International Airport, New York USA. till date. The
details of the package/consignment including your name, your email
address and the official document from the United Nations(UN) office in
London,UK are tagged on the Package/consignment "Metal Trunk boxes" in
your favor.
But to enable me confirm if you are the actual recipient of this
package/consignment, I will advise you to provide your current Phone
Number and Full Address to enable me cross check if it corresponds
with the address on the official documents including the Name of the
nearest Airport around your city. Please note that this
package/consignment is supposed to have been returned to the United
States Treasury Department as unclaimed delivery due to the delay in
concluding the clearance processes. Therefore you are advice to
respond to this message and call me immediately as you read.
Once I receive your above requested information I can get everything
concluded within 3-6 hours upon your acceptance and proceed to your
address for delivery. Here is my direct telephone number(6468956513),
if I am unable to pick your call you should know that I have gone for
inspection just email me and make sure you include your mobile number
so that I can give you a call. Get back to me on this email address on
: [email protected]
Best Regards,
William Clifford
Office of Inspection
John F. Kennedy International Airport, New York, USA.
Direct Telephone: +16468956513
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.