Advance fee loan scams and fraudulent loan sites.
by Faizan Docherty Wed Feb 19, 2014 1:19 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 74.125.82.194<br>Originating ISP: Google<br> City: Mountain View<br>Country of Origin: United States<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.126.40 with SMTP id mv8csp67094pdb;
Tue, 18 Feb 2014 13:33:39 -0800 (PST)
X-Received: by 10.42.62.196 with SMTP id z4mr7971579ich.49.1392759219173;
Tue, 18 Feb 2014 13:33:39 -0800 (PST)
Return-Path: <[email protected]>
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com. [184.154.1.124])
by mx.google.com with ESMTPS id nt7si19894172igb.59.2014.02.18.13.33.38
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Tue, 18 Feb 2014 13:33:39 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 184.154.1.124 as permitted sender) client-ip=184.154.1.124;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 184.154.1.124 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: from mail-we0-f194.google.com ([74.125.82.194]:43386)
by r8-chicago.webserversystems.com with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1WFsIM-0007IR-4f
for <snipped>; Tue, 18 Feb 2014 15:33:38 -0600
Received: by mail-we0-f194.google.com with SMTP id u56so4094868wes.1
for <snipped>; Tue, 18 Feb 2014 13:33:36 -0800 (PST)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.180.75.105 with SMTP id b9mr19710286wiw.6.1392756264512;
Tue, 18 Feb 2014 12:44:24 -0800 (PST)
Received: by 10.194.56.103 with HTTP; Tue, 18 Feb 2014 12:44:24 -0800 (PST)
Date: Tue, 18 Feb 2014 21:44:24 +0100
Message-ID: <CANnT83Ewb4O1MQ4fKsd1uYYDt2oJFCuzhZez55sWko_4gaFc9Q@mail.gmail.com>
Subject: pret finance
From: alice sanchez <[email protected]>
To: <snipped>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: No, score=-1.3
X-Spam-Score: -12
X-Spam-Bar: -
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Bonsoir Particulier Français; Belge , Suisse, ou canadien
etc.... si vous avez besoin de prêts entre particuliers pour faire face aux
difficultés financières nous sommes un groupe d'experts financiers en mesure
de vous faire un prêt au montant de 1000 EURO a 1.000.000 EURO et le rembourser
avec intérêt a un taux faible de 3% avec des conditions qui vous faciliteront
la vie.Nous pouvons vous aider dans plusieurs domaines parmi lesquels [...]


Content analysis details: (-1.3 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[74.125.82.194 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sanchezalicefarou[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.5 CRM114_PROB_GOOD CRM114: CRM114_PROB_GOOD
X-Spam-Flag: NO
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - r8-chicago.webserversystems.com
X-AntiAbuse: Original Domain - <snipped>
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: r8-chicago.webserversystems.com: none
X-Source:
X-Source-Args:
X-Source-Dir:


Bonsoir

Particulier Français; Belge , Suisse, ou canadien etc.... si vous avez
besoin de prêts entre particuliers pour faire face aux difficultés
financières nous sommes un groupe d'experts financiers en mesure de
vous faire un prêt au montant de 1000 EURO a 1.000.000 EURO et le rembourser
avec intérêt a un taux faible de 3% avec des conditions qui vous
faciliteront la vie.Nous pouvons vous aider dans plusieurs domaines
parmi lesquels

*Prêt Financier
* Prêt immobilier
* Prêt à l'investissement
* Prêt automobile
* Dette de consolidation
* Marge de crédit
* Deuxième hypothèque
* Rachat de crédit
* Prêt personnel

merci


Google translation:

good evening

Especially French, Belgian, Swiss or Canadian etc .... if you
need loans between individuals to cope with the difficulties
Financial we are a group of financial experts able to
make a loan in the amount of 1,000 EURO 1.000.000 EURO and repay
with a low interest rate of 3% with conditions that you
facilitate life.We can help you in several areas
including

* Financial Loan
* Home Loan
* Investment Loan
* Auto Loan
* Debt consolidation
* Line of Credit
* Second Mortgage
* Acquisition of credit
* Personal Loan

thank you

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 5 guests