Advance fee loan scams and fraudulent loan sites.
by Faizan Docherty Thu Aug 06, 2015 7:52 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 123.30.18.122
Originating ISP: Vietnam Posts And Telecommunications (vnpt)
City: Hanoi
Country of Origin: Vietnam
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.79.65.198 with SMTP id o189csp897972iva;
Sat, 1 Aug 2015 10:45:39 -0700 (PDT)
X-Received: by 10.68.168.161 with SMTP id zx1mr7838091pbb.35.1438451138958;
Sat, 01 Aug 2015 10:45:38 -0700 (PDT)
Return-Path: <[email protected]>
Received: from m01.vms.com.vn (m01.vms.com.vn. [123.30.18.122])
by mx.google.com with ESMTP id or4si17838919pdb.2.2015.08.01.10.45.36;
Sat, 01 Aug 2015 10:45:38 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 123.30.18.122 as permitted sender) client-ip=123.30.18.122;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 123.30.18.122 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=mobifone.vn
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A2DoPgD4BL1V/3EGlwpbGQEBgjKBIV0MBqoNi0cJU4gPhjKBRgEBAQEBAYELhBsPLTQqAYEAJgEXCIVqy1CPdBEBg1CBNAWUeYl/H4N1FYQLiHsZhmmDZIQjb4EOOoEEAQEF
X-IPAS-Result: A2DoPgD4BL1V/3EGlwpbGQEBgjKBIV0MBqoNi0cJU4gPhjKBRgEBAQEBAYELhBsPLTQqAYEAJgEXCIVqy1CPdBEBg1CBNAWUeYl/H4N1FYQLiHsZhmmDZIQjb4EOOoEEAQEF
X-IronPort-AV: E=Sophos;i="5.15,592,1432573200";
d="scan'208,217";a="64678743"
Received: from mail-vp-s-03.vms.com.vn ([10.151.6.113])
by m01.vms.com.vn with ESMTP; 02 Aug 2015 00:45:22 +0700
Received: from MAIL-VP-S-03.vms.com.vn (10.151.6.113) by
MAIL-VP-S-03.vms.com.vn (10.151.6.113) with Microsoft SMTP Server (TLS) id
15.0.847.32; Sun, 2 Aug 2015 00:45:21 +0700
Received: from MAIL-VP-S-03.vms.com.vn ([fe80::24b3:20de:7d53:81c9]) by
MAIL-VP-S-03.vms.com.vn ([fe80::24b3:20de:7d53:81c9%18]) with mapi id
15.00.0847.030; Sun, 2 Aug 2015 00:45:08 +0700
From: Dang Phuoc Thanh <[email protected]>
Subject: Loan
Thread-Topic: Loan
Thread-Index: AdDMUP3EY88yhv4rSj6R1FFt7DnnHQ==
Date: Sat, 1 Aug 2015 17:45:07 +0000
Message-ID: <[email protected]>
Accept-Language: vi-VN, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.151.6.24]
Content-Type: multipart/alternative;
boundary="_000_0660500fde3b46f29bb24757c60e107cMAILVPS03vmscomvn_"
MIME-Version: 1.0


Hello Are you in any financial problem? Do you need quick loan for Capital so you can get back to business. or you need funds to pay off your bills If YES do contact us back for more detail for loan application. contact us on our private email only on====> [email protected]

please note All your responses should be send to our private Email address only: [email protected]



IMPORTANT NOTICE:
The information in this email is the property of Mobifone. This communication is confidential and intended solely for the addressee(s). Any unauthorized review, use, disclosure or distribution is prohibited. If you believe this message has been sent to you in error, please notify the sender by replying to this transmission and delete the message without disclosing it. Thank you.
E-mail including attachments is susceptible to data corruption, interception, unauthorized amendment, tampering and viruses, and we only send and receive emails on the basis that we are not liable for any such corruption, interception, amendment, tampering or viruses or any consequences thereof.

THÔNG BÁO BẢO MẬT:
Thông tin trong e-mail này là tài sản của MobiFone. Việc trao đổi thư tín này mang tính chất bảo mật và chỉ dành cho người có tên trong địa chỉ người nhận trên đây. Ngăn cấm bất kỳ việc phê bình, sử dụng, tiết lộ hoặc phân phối trái phép thông tin trao đổi trên đây. Nếu quý vị tin rằng thông tin này gửi tới quý vị do một lỗi nào đó thì xin quý vị hãy thông báo cho người gửi thư bằng cách trả lời thư và xóa thông tin mà quý vị đã nhận được, và không tiết lộ những thông tin này. Trân trọng cám ơn quý vị!
Thư này bao gồm các tập tin đính kèm. Dữ liệu có thể bị sửa đổi, bị chặn và thay đổi trái phép, bị xáo trộn và có thễ bị nhiễm virus. Chúng tôi chỉ gửi và nhận thư trên cơ sở chúng tôi không chịu trách nhiệm trước những việc sửa đổi, việc bị chặn, xáo trộn hay lây nhiễm virus hay bất kỳ hậu quả nào từ các việc nêu trên.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

by AlanJones Wed Nov 11, 2015 12:55 am
From: Jennifer Aubert-Utz - [email protected]
Other Email: [email protected]

Hello Are you in any financial problem? Do you need quick l0an for Capital so you can get back to business. or you need funds to pay off your bills If YES do contact us back for more detail for loan application. contact us on our private email only on====> [email protected]
please note All your responses should be send to our private Email address only: [email protected]

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
by Mortal Sun Nov 15, 2015 8:08 am

Delivered-To:
Received: by 10.64.206.200 with SMTP id lq8csp446579iec;
Sun, 15 Nov 2015 00:28:14 -0800 (PST)
X-Received: by 10.50.178.141 with SMTP id cy13mr1161433igc.61.1447576094133;
Sun, 15 Nov 2015 00:28:14 -0800 (PST)
Return-Path: <[email protected]>
Received: from s12p02o141.mxlogic.net (s12p02o141.mxlogic.net. [208.65.145.64])
by mx.google.com with ESMTPS id c75si10287236iod.73.2015.11.15.00.27.52
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 15 Nov 2015 00:28:14 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 208.65.145.64 as permitted sender) client-ip=208.65.145.64;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 208.65.145.64 as permitted sender) [email protected]
Received: from unknown ([216.134.176.30])
by s12p02o141.mxlogic.net(mxl_mta-8.5.0-3)
with SMTP id 70248465.0.18270.00-370.39967.s12p02o141.mxlogic.net (envelope-from <[email protected]>);
Sun, 15 Nov 2015 01:28:13 -0700 (MST)
X-MXL-Hash: 5648421d4a902086-a7a4b83180cfc1c881ce51910b2aa4e98a87897f
Received: from 39-EXCH-HT1.mmcrsdom.mmcroot.mmc ([10.16.179.17])
by smtp3.maimonidesmed.org with ESMTP id tAF8RWOB014265-tAF8RWOD014265
(version=TLSv1.0 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT);
Sun, 15 Nov 2015 03:27:32 -0500
Received: from HOS-EXCH-MBX1.mmcrsdom.mmcroot.mmc
([fe80::1dda:7cdc:eb70:b375]) by 39-EXCH-HT1.mmcrsdom.mmcroot.mmc
([fe80::61c1:e784:4e9:9643%12]) with mapi id 14.01.0218.012; Sun, 15 Nov 2015
03:27:31 -0500
From: Malavika Prasad <[email protected]>
Subject: Hello
Thread-Topic: Hello
Thread-Index: AdEff3hCqBO8nIN7SdaogaKPsyz7Xw==
Date: Sun, 15 Nov 2015 08:27:31 +0000
Message-ID: <E4FB4BEFDDE5FB48A8E9BAC90060ED150117FD8102@HOS-EXCH-MBX1.mmcrsdom.mmcroot.mmc>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [172.31.2.21]
Content-Type: multipart/alternative;
boundary="=_reb-r0CD0C7DE-t5648421D"
MIME-Version: 1.0
X-Processed-By: Rebuild v2.0-0
X-AnalysisOut: [v=2.1 cv=Q7zUltCa c=1 sm=1 tr=0 p=R5N7VZa3NfwA:10 a=DqdieJ]
X-AnalysisOut: [Q3jlz0UlZNUqqeRQ==:117 a=DqdieJQ3jlz0UlZNUqqeRQ==:17 a=9cW]
X-AnalysisOut: [_t1CCXrUA:10 a=x48TiLA1AAAA:8 a=YlVTAMxIAAAA:8 a=Zv7AgSCp4]
X-AnalysisOut: [x8A:10 a=xqWC_Br6kY4A:10 a=qtqOOiqGOCEA:10 a=Npn9PEg5AAAA:]
X-AnalysisOut: [8 a=ZPwPbGSwRkhNf6rHuWUA:9 a=7w1Xv5VboHiov2FS:21 a=7tRtQxC]
X-AnalysisOut: [jkVxSgV4E:21 a=wPNLvfGTeEIA:10 a=fggGjZom55jyWv0o:21 a=_W_]
X-AnalysisOut: [S_7VecoQA:10 a=frz4AuCg-hUA:10]
X-Spam: [F=0.9999994939; CM=0.999; MH=0.663(2015111501); S=0.200(2015072901)]
X-MAIL-FROM: <[email protected]>
X-SOURCE-IP: [216.134.176.30]

This is a multi-part MIME message.

--=_reb-r0CD0C7DE-t5648421D
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Dear Loan Seekers,

Greetings from Access Co-Operative Loan Service, this is to inform you that
Access Co-Operative Loan Service now gives out loan at 3% interest rate, are you a business man or woman in any financial difficulty.Do you have a low credit score and finding it difficult to obtain a loan from local banks and other financial institutions? The solution to your financial problems are over.
Ensure you contact us back with our private email below
Email: [email protected]
My Best Regards,
Please do ensure all your respond and reply are sent to our private Contact Email: [email protected]
(Transfer Officer)

Never tell scammer he is listed on this site.

If you find out person you are communicating with is listed here: stop all contact with the scammer

Need help? Contact me at mortimer.allen @ scamwarners.com (remove the spaces)

Who is online

Users browsing this forum: ClaudeBot and 10 guests