Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#237984 by Faizan Docherty Mon Feb 16, 2015 12:43 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 209.85.214.195
Originating ISP: Google
City: Lafayette
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Return-Path: <[email protected]>
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
by sloti33d1t14 (Cyrus git2.5+0-git-fastmail-10422) with LMTPA;
Mon, 16 Feb 2015 09:08:37 -0500
X-Sieve: CMU Sieve 2.4
X-Spam: high
X-Spam-score: 10.9
X-Spam-hits: BAYES_50 0.8, DEAR_BENEFICIARY 1.578, FREEMAIL_ENVFROM_END_DIGIT 0.25,
FREEMAIL_FROM 0.001, FREEMAIL_REPLY 1, HK_SCAM_N3 1.068,
HTML_MESSAGE 0.001, LOTS_OF_MONEY 0.001, ME_419_MANY0 1.5,
ME_419_MANY1 1.5, MONEY_FORM_SHORT 1.741, MONEY_FRAUD_3 2.22,
RCVD_IN_DNSWL_LOW -0.7, SPF_PASS -0.001, T_FILL_THIS_FORM_SHORT 0.01,
LANGUAGES en, BAYES_USED global, SA_VERSION 3.3.2
X-Spam-source: IP='209.85.214.195', Host='mail-ob0-f195.google.com', Country='US',
FromHeader='com', MailFrom='com'
X-Spam-charsets: plain='UTF-8', html='UTF-8'
X-Resolved-to: <snipped>
X-Delivered-to: <snipped>
X-Mail-from: [email protected]
Received: from mx4 ([10.202.2.203])
by compute3.internal (LMTPProxy); Mon, 16 Feb 2015 09:08:37 -0500
Received: from mx4.messagingengine.com (localhost [127.0.0.1])
by mx4.nyi.internal (Postfix) with ESMTP id E51483C0141
for <snipped>; Mon, 16 Feb 2015 09:08:36 -0500 (EST)
Received: from mx4.nyi.internal (localhost [127.0.0.1])
by mx4.messagingengine.com (Authentication Milter) with ESMTP
id E5DCF5BE566.B225B3C0177;
Mon, 16 Feb 2015 09:08:36 -0500
Authentication-Results: mx4.messagingengine.com;
dkim=pass (2048-bit rsa key) header.d=gmail.com [email protected] header.b=Hzb8Dfd4;
dmarc=pass header.from=gmail.com;
spf=pass [email protected] smtp.helo=mail-ob0-f195.google.com
Received-SPF: pass (gmail.com ... _spf.google.com: Sender is authorized to use '[email protected]' in 'mfrom' identity (mechanism 'include:_netblocks.google.com' matched)) receiver=mx4.messagingengine.com; identity=mailfrom; envelope-from="[email protected]"; helo=mail-ob0-f195.google.com; client-ip=209.85.214.195
Received: from mail-ob0-f195.google.com (mail-ob0-f195.google.com [209.85.214.195])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(No client certificate requested)
by mx4.messagingengine.com (Postfix) with ESMTPS id B225B3C0177
for <snipped>; Mon, 16 Feb 2015 09:08:36 -0500 (EST)
Received: by mail-ob0-f195.google.com with SMTP id va2so10352369obc.2
for <snipped>; Mon, 16 Feb 2015 06:08:35 -0800 (PST)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.60.145.212 with SMTP id sw20mr15397397oeb.39.1424095715361;
Mon, 16 Feb 2015 06:08:35 -0800 (PST)
Received: by 10.182.18.167 with HTTP; Mon, 16 Feb 2015 06:08:35 -0800 (PST)
Date: Mon, 16 Feb 2015 06:08:35 -0800
Message-ID: <CADdbfMVketP-U+MeLb-CCHAwCGAB=AQGK2G7PrriTW+2QnTU+A@mail.gmail.com>
Subject: Subject: Re: Abandoned Package/Consignment At John F. Kennedy
International Airport, New York USA,

From: william clifford <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=047d7b5d341e3d86ed050f351f2d


Subject: Re: Abandoned Package/Consignment At John F. Kennedy International Airport, New York USA,


Attn: Beneficiary.

I am William Clifford, from the Office of Inspection Unit/United Nations Agency in John F. Kennedy International Airport, New York USA. During my
recent routine check at the Airport Storage/vault on withheld packages, I discovered an abandoned shipment by a Diplomat from London and
Africa, when scanned it revealed an undisclosed sum of money in two Metal Trunk Boxes weighing approximately 25kg each of which some people
are coming after this package/consignment to clam it in your name.

The package/consignment was abandoned because the Contents was not properly declared by the consignee as “MONEY” rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for the INTERNATIONAL PACKAGE/CONSIGNMENT MONEY MOVEMENT Charges Before bringing in the package/consignment into US and we refused to
return back the package/consignment where it came from since, we have
already received it in the USA. On my assumption, each of the package/consignment contain not less than $5 Million to $5.5Million even above and the consignment is still left in our Storage House here at
the John F.Kennedy International Airport, New York USA. till date. The details of the package/consignment including your name, your email address and the official document from the United Nations(UN) office in London,UK are tagged on the Package/consignment "Metal Trunk boxes" in your favor.

But to enable me confirm if you are the actual recipient of this package/consignment, I will advise you to provide your current Phone Number and Full Address to enable me cross check if it corresponds with the address on the official documents including the
Name of the nearest Airport around your city. Please note that this package/consignment is supposed to have been returned to the United States Treasury Department as unclaimed delivery due to the delay in concluding the clearance processes. Therefore you are advice to respond to this message and call me immediately as you read.

Once I receive your above requested information I can get everything concluded
within 3-6 hours upon your acceptance and proceed to your address for delivery. Here is my direct telephone number(6468956513), if I am unable
to pick your call you should know that I have gone for inspection just email me and make sure you include your mobile number so that I can give you a call. Get back to me on this email address on : [email protected]

Best Regards,
William Clifford
Office of Inspection
John F. Kennedy International Airport, New York, USA.
Direct Telephone: +16468956513

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 246 guests