Scams re-targeting those who have already been victimized
by Faizan Docherty Tue Dec 03, 2013 3:15 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 197.228.216.124<br>Originating ISP: Telkommobile<br> City: Johannesburg<br>Country of Origin: South Africa<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.177.2 with SMTP id bg2csp192560vcb;
Tue, 3 Dec 2013 04:07:06 -0800 (PST)
X-Received: by 10.14.93.197 with SMTP id l45mr6185888eef.53.1386072425451;
Tue, 03 Dec 2013 04:07:05 -0800 (PST)
Return-Path: <[email protected]>
Received: from tovuti.wananchi.com ([62.8.88.127])
by mx.google.com with ESMTPS id i1si27764443eev.215.2013.12.03.04.06.34
for <snipped>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 03 Dec 2013 04:07:05 -0800 (PST)
Received-SPF: neutral (google.com: 62.8.88.127 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=62.8.88.127;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 62.8.88.127 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from greatair by tovuti.wananchi.com with local (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1VnokK-0007yR-1V
for <snipped>; Tue, 03 Dec 2013 15:06:32 +0300
To: <snipped>
Subject: ATTENTION PLEASE!
X-PHP-Script: greatairways.co.ke/mail.php for 197.228.216.124
From: Mr.Kandiwapa Thomas <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Tue, 03 Dec 2013 15:06:32 +0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - tovuti.wananchi.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [998 998] / [47 12]
X-AntiAbuse: Sender Address Domain - tovuti.wananchi.com
X-Get-Message-Sender-Via: tovuti.wananchi.com: authenticated_id: greatair/only user confirmed/virtual account not confirmed


ATTENTION PLEASE!

We hereby confirm receipt of part payment of US$8,500,000.00 dollars only,
into our official ESCROW account with the HSBC Bank in London by order of
the African Development Bank (ADB) in-charge of Foreign Debt Recovery
Committee on Overdue Contract ,lotto,Loan/ Next of Kin payments in Africa,
as indicated in our database.

We sincerely apologize for delays and advice you to STOP any further
communication with any other payment centres in Europe, as well as your
associates in any of the African countries e.g, South Africa, Nigeria,
Ghana, Togo, Abidjan, Angola, Cotonou,Malaysia, for they contributed 100%
hindrances to the release of your funds.

Kindly provide us with the below information to reconfirm your details in
our database and for our prompt payment procedures.


Beneficiary's name /
Age:.............................................Company's name / Rank in
office:..................................Address:............................................................Tel:.........................
*Fax:.................................Receiving
Bank:.....................................................Address:............................................................Bank
Routing Number:.................Swift
Code:...................Account...number:...................................................

..Note that an empty account will serve as long as is still a valid account .

Our final fund release order will be forwarded to our operational paying
bank, for the immediate release of your allocation to you upon receipt
and official re-confirmation of your information.

For any further inquiry, please contact the undersigned officer as funds
will be retrieved to treasury after ten (10) business days of this notice.

Yours In Service,

Mr.Kandiwapa Thomas ,
Manager,Foreign operations Dept.
+447872204722
[email protected]

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

by Faizan Docherty Sat Dec 14, 2013 7:37 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 197.228.216.124<br>Originating ISP: Telkommobile<br> City: Johannesburg<br>Country of Origin: South Africa<br>* For a complete report on this email header goto ipTRACKERonline


From Mr.Kandiwapa Thomas Tue Dec 3 04:06:20 2013
X-Apparently-To: <snipped> via 72.30.238.253; Thu, 12 Dec 2013 20:54:31 -0800
Return-Path: <[email protected]>
X-YahooFilteredBulk: 62.8.88.127
Received-SPF: none (domain of tovuti.wananchi.com does not designate permitted sender hosts)
X-YMailISG: <snipped>
X-Originating-IP: [62.8.88.127]
Authentication-Results: mta1018.mail.bf1.yahoo.com from=; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO tovuti.wananchi.com) (62.8.88.127)
by mta1018.mail.bf1.yahoo.com with SMTP; Thu, 12 Dec 2013 20:54:31 -0800
Received: from greatair by tovuti.wananchi.com with local (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1Vnok8-0007v8-0W
for <snipped>; Tue, 03 Dec 2013 15:06:20 +0300
To: <snipped>
Subject: ATTENTION PLEASE!
X-PHP-Script: greatairways.co.ke/mail.php for 197.228.216.124
From: Mr.Kandiwapa Thomas <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Tue, 03 Dec 2013 15:06:20 +0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - tovuti.wananchi.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [998 998] / [47 12]
X-AntiAbuse: Sender Address Domain - tovuti.wananchi.com
X-Get-Message-Sender-Via: tovuti.wananchi.com: authenticated_id: greatair/only user confirmed/virtual account not confirmed
Content-Length: 1887


ATTENTION PLEASE!

We hereby confirm receipt of part payment of US$8,500,000.00 dollars only,
into our official ESCROW account with the HSBC Bank in London by order of
the African Development Bank (ADB) in-charge of Foreign Debt Recovery
Committee on Overdue Contract ,lotto,Loan/ Next of Kin payments in Africa,
as indicated in our database.

We sincerely apologize for delays and advice you to STOP any further
communication with any other payment centres in Europe, as well as your
associates in any of the African countries e.g, South Africa, Nigeria,
Ghana, Togo, Abidjan, Angola, Cotonou,Malaysia, for they contributed 100%
hindrances to the release of your funds.

Kindly provide us with the below information to reconfirm your details in
our database and for our prompt payment procedures.


Beneficiary's name /
Age:.............................................Company's name / Rank in
office:..................................Address:............................................................Tel:.........................
*Fax:.................................Receiving
Bank:.....................................................Address:............................................................Bank
Routing Number:.................Swift
Code:...................Account...number:...................................................

..Note that an empty account will serve as long as is still a valid account .

Our final fund release order will be forwarded to our operational paying
bank, for the immediate release of your allocation to you upon receipt
and official re-confirmation of your information.

For any further inquiry, please contact the undersigned officer as funds
will be retrieved to treasury after ten (10) business days of this notice.

Yours In Service,

Mr.Kandiwapa Thomas ,
Manager,Foreign operations Dept.
+447872204722
[email protected]

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: ClaudeBot and 4 guests