Hannatu Suleiman [email protected] +234-7082978703

Delivered-To: <snipped>
Received: by 10.233.223.131 with SMTP id t125csp97636qkf;
Wed, 7 Oct 2015 11:34:50 -0700 (PDT)
X-Received: by 10.60.23.104 with SMTP id l8mr1738563oef.19.1444242890307;
Wed, 07 Oct 2015 11:34:50 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-oi0-x241.google.com (mail-oi0-x241.google.com. [2607:f8b0:4003:c06::241])
by mx.google.com with ESMTPS id z72si19785574oia.9.2015.10.07.11.34.50
for <<snipped>>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 07 Oct 2015 11:34:50 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4003:c06::241 as permitted sender) client-ip=2607:f8b0:4003:c06::241;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4003:c06::241 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-oi0-x241.google.com with SMTP id e134so1363169oig.2
for <<snipped>>; Wed, 07 Oct 2015 11:34:50 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.202.229.207 with SMTP id c198mr1659628oih.109.1444242890134;
Wed, 07 Oct 2015 11:34:50 -0700 (PDT)
Received: by 10.202.0.211 with HTTP; Wed, 7 Oct 2015 11:34:50 -0700 (PDT)
Reply-To: [email protected]
Date: Wed, 7 Oct 2015 19:34:50 +0100
Message-ID: <CAAtGWgvSU=GVVP8GsJm3hCkYMCMq8t-mF7gJQx6v8f0vtR4h8Q@mail.gmail.com>
Subject: Your Long Overdue Fund
From: Hannatu Suleiman <[email protected]>
To: <snipped>

DEBT MANAGEMENT OFFICE

NDIC Building (1st Floor),

Plot 447/448 Constitution Avenue,

Central Business District,

P.M.B. 532, Garki Abuja, Nigeria.

Attention

This office has been mandated by the Federal Government of Nigeria to recall your fund valued $15.5 Million from the United States of America and find a way of reconciling your debt records and wire out the money into your account. To this effect, you are advised to forward to this office your full banking information, your full address and your complete information.

Note, that this exercise will only work for five working days without interruption. Seasoned Lawyers has been positioned to follow up your file to the Point of payment. You are therefore to call me on my phone number as stated below.

Regards

Mrs. Hannatu Suleiman
Director, Debt Recording
and Settlement Department

TEL: +234-708-297-8703

Same scam and phone number with a new email address [email protected] dmong.org is in the process of being reported for fraud.

Header Analysis Quick Report
Originating IP: 85.9.20.149
Originating ISP: Cyberghost
City: n/a
Country of Origin: Romania
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.55.25.146 with SMTP id 18csp737420qkz;
Thu, 5 Nov 2015 21:17:56 -0800 (PST)
X-Received: by 10.140.92.16 with SMTP id a16mr5392653qge.54.1446787076728;
Thu, 05 Nov 2015 21:17:56 -0800 (PST)
Return-Path: <[email protected]>
Received: from postlady.main-hosting.com (smtp9.main-hosting.com. [31.170.166.244])
by mx.google.com with ESMTP id o11si7442065qge.57.2015.11.05.21.17.56
for <<snipped>>;
Thu, 05 Nov 2015 21:17:56 -0800 (PST)
Received-SPF: neutral (google.com: 31.170.166.244 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=31.170.166.244;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 31.170.166.244 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: by postlady.main-hosting.com ([main-hosting.com sendmail], from userid 99)
id A6D454051A; Fri, 6 Nov 2015 05:20:58 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
postlady.main-hosting.com
X-Spam-Level: ***
X-Spam-Status: No, score=3.1 required=7.0 tests=HTML_MESSAGE,LOTS_OF_MONEY,
MONEY_FRAUD_3,TVD_RCVD_SPACE_BRACKET autolearn=disabled version=3.3.1
Received: from mx1.main-hosting.com (mx1.main-hosting.com [31.170.163.242])
by postlady.main-hosting.com ([main-hosting.com sendmail]) with ESMTP id 598E040409
for <<snipped>>; Fri, 6 Nov 2015 05:20:58 +0000 (UTC)
Received: from webmail1.gbfreehosting.com (localhost [127.0.0.1])
by mx1.main-hosting.com ([Main-hosting.com Mail System]) with ESMTP id AA7221441271
for <<snipped>>; Fri, 6 Nov 2015 00:17:55 -0500 (EST)
Received: from 85.9.20.149
(SquirrelMail authenticated user [email protected])
by webmail1.gbfreehosting.com with HTTP;
Fri, 6 Nov 2015 00:17:55 -0500
Message-ID: <ec0cb2177f56df3e2699a0fc5561fec4.squirrel@webmail1.gbfreehosting.com>
Date: Fri, 6 Nov 2015 00:17:55 -0500
Subject: Re-activation of Your Fund
From: "[email protected]" <[email protected]>
To: <snipped>
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: multipart/alternative;boundary="----=_20151106001755_78705"
X-Priority: 3 (Normal)
Importance: Normal

DEBT MANAGEMENT OFFICE
NDIC Building (1st Floor),
Plot 447/448 Constitution Avenue,
Central Business District,
P.M.B. 532, Garki Abuja, Nigeria.

Attention

The Re-activation of the Debt Management Office was informed by official payment of foreign beneficiaries as to attract direct Foreign Investment to boost the economy of our dear country Nigeria as was established in Article 31 subsection 2 as adopted in section 216. The total fund approved by this organization through the office of the President as can be deducted from our Federal Reserve Account as at 2015 is $10.5 Million.

Your immediate call on this matter will be highly appreciated as you call me on +234-708-297-8703. You must follow it up by forwarding your full banking information and copies of your Identification i.e passport/driver's license with your cellphone number and full address. You must declare your total compliance to this information.

Regards

Mrs. Hannatu Suleiman
Director, Debt Recording
and Settlement Department

TEL: +234-708-297-8703

The same email also came from [email protected]

Delivered-To: <snipped>
Received: by 10.55.25.146 with SMTP id 18csp737483qkz;
Thu, 5 Nov 2015 21:18:10 -0800 (PST)
X-Received: by 10.67.8.40 with SMTP id dh8mr14861169pad.121.1446787090299;
Thu, 05 Nov 2015 21:18:10 -0800 (PST)
Return-Path: <[email protected]>
Received: from COL004-OMC4S8.hotmail.com (col004-omc4s8.hotmail.com. [65.55.34.210])
by mx.google.com with ESMTPS id j6si1290337pbq.225.2015.11.05.21.18.10
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 05 Nov 2015 21:18:10 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.34.210 as permitted sender) client-ip=65.55.34.210;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.55.34.210 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=hotmail.com
Received: from COL129-W64 ([65.55.34.200]) by COL004-OMC4S8.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);
Thu, 5 Nov 2015 21:17:52 -0800
X-TMN: [yskhKNvqR94ao+Zs6dpn05Hh0OktfJqs]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_29e0664a-257e-457f-b8a7-b8fe4745db1e_"
From: "Mrs. Hannatu Suleiman" <[email protected]>
To: "<snipped>" <<snipped>>
Subject: Re-activation of Your Fund
Date: Fri, 6 Nov 2015 05:17:51 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 06 Nov 2015 05:17:52.0112 (UTC) FILETIME=[7C3B9700:01D11852]

DEBT MANAGEMENT OFFICE
NDIC Building (1st Floor),
Plot 447/448 Constitution Avenue,
Central Business District,
P.M.B. 532, Garki Abuja, Nigeria.

Attention

The Re-activation of the Debt Management Office was informed by official payment of foreign beneficiaries as to attract direct Foreign Investment to boost the economy of our dear country Nigeria as was established in Article 31 subsection 2 as adopted in section 216. The total fund approved by this organization through the office of the President as can be deducted from our Federal Reserve Account as at 2015 is $10.5 Million.

Your immediate call on this matter will be highly appreciated as you call me on +234-708-297-8703. You must follow it up by forwarding your full banking information and copies of your Identification i.e passport/driver's license with your cellphone number and full address. You must declare your total compliance to this information.

Regards

Mrs. Hannatu Suleiman
Director, Debt Recording
and Settlement Department

TEL: +234-708-297-8703