Advance fee loan scams and fraudulent loan sites.
by Faizan Docherty Thu Dec 26, 2013 2:09 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 54.206.5.192<br>Originating ISP: Amazon.com<br> City: Sydney<br>Country of Origin: Australia<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.227.64.193 with SMTP id f1csp414312wbi;
Wed, 25 Dec 2013 14:51:58 -0800 (PST)
X-Received: by 10.60.63.102 with SMTP id f6mr6644oes.76.1388011918036;
Wed, 25 Dec 2013 14:51:58 -0800 (PST)
Return-Path: <[email protected]>
Received: from gateway07.websitewelcome.com ([69.56.159.26])
by mx.google.com with ESMTP id r7si22045811oem.84.2013.12.25.14.51.57
for <snipped>;
Wed, 25 Dec 2013 14:51:57 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 69.56.159.26 as permitted sender) client-ip=69.56.159.26;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 69.56.159.26 as permitted sender) [email protected]
Received: by gateway07.websitewelcome.com (Postfix, from userid 5007)
id 636F141F93B69; Wed, 25 Dec 2013 16:51:57 -0600 (CST)
Received: from ham07.websitewelcome.com (unknown [192.185.0.198])
by gateway07.websitewelcome.com (Postfix) with ESMTP id 525F341F93B49
for <snipped>; Wed, 25 Dec 2013 16:51:57 -0600 (CST)
Received: by ham07.websitewelcome.com (Postfix, from userid 500)
id 389B0460002; Wed, 25 Dec 2013 16:51:57 -0600 (CST)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
ham07.websitewelcome.com
X-Spam-Flag2999: NO
X-Spam-Level2999:
X-Spam-Status2999: "No, score=-2.5 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD
autolearn=ham version=3.3.1
Received: from terracan.websitewelcome.com (terracan.websitewelcome.com [192.185.82.154])
by ham07.websitewelcome.com (Postfix) with ESMTP id E56F5460002
for <snipped>; Wed, 25 Dec 2013 16:51:56 -0600 (CST)
Received: from babyrome by terracan.websitewelcome.com with local (Exim 4.80)
(envelope-from <[email protected]>)
id 1VvxIy-0003yJ-GD
for <snipped>; Wed, 25 Dec 2013 16:51:56 -0600
To: <snipped>
Subject: Fill out 3 minutes Form and Get Business loan!
X-PHP-Script: babyromeoshop24.info/wp-content/plugins/inc/thumb.php for 54.206.5.192
From: Elias <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Wed, 25 Dec 2013 16:51:56 -0600
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - terracan.websitewelcome.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [4909 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - terracan.websitewelcome.com
X-BWhitelist: no
X-Source-IP:
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/babyrome/public_html/wp-content/plugins/inc/thumb.php
X-Source-Dir: babyromeoshop24.info:/public_html/wp-content/plugins/inc
X-Source-Sender:
X-Source-Auth: babyrome
X-Email-Count: 61
X-Source-Cap: YmFieXJvbWU7bnJvY2htYW47dGVycmFjYW4ud2Vic2l0ZXdlbGNvbWUuY29t


Congratulations, we were able to match you with a loaner!
If you were previously turned down by other loaners, we believe this site may be able to help you find the money that you need.
Many of our client have received industrial loan company through them.

So don't delay... click on the following link to visit Fast Loan Search and let them help you get the car loan that you are looking for:

http: //bit. ly/ 1fh EK vU
(This shortened link our site)

Happy Holidays !

Jaden Miller VP,
Communications
16045 Coastal Highway Lewes, DE 19905.
Don't want to receive any more emails from us? Send a letter to our e-mail [email protected]

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 6 guests