Advance fee loan scams and fraudulent loan sites.
by Faizan Docherty Sun Sep 07, 2014 1:23 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 190.12.89.67
Originating ISP: Technologies S.a.c.
City: Lima
Country of Origin: Peru
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.125.234 with SMTP id mt10csp28269pdb;
Sun, 7 Sep 2014 04:48:08 -0700 (PDT)
X-Received: by 10.70.90.39 with SMTP id bt7mr7960557pdb.121.1410090488392;
Sun, 07 Sep 2014 04:48:08 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (nov-007-i627.relay.mailchannels.net. [46.232.183.181])
by mx.google.com with ESMTP id fh5si12759866pbb.70.2014.09.07.04.48.05
for <snipped>;
Sun, 07 Sep 2014 04:48:08 -0700 (PDT)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=46.232.183.181;
Authentication-Results: mx.google.com;
spf=neutral (google.com: [email protected] does not designate permitted sender hosts) [email protected]
X-Sender-Id: _forwarded-from|41.203.69.20
Received: from r8-chicago.webserversystems.com (ip-10-213-14-133.us-west-2.compute.internal [10.213.14.133])
by relay.mailchannels.net (Postfix) with ESMTPA id F342410045C
for <snipped>; Sun, 7 Sep 2014 11:48:01 +0000 (UTC)
X-Sender-Id: _forwarded-from|41.203.69.20
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.227.41.147])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.2.13);
Sun, 07 Sep 2014 11:48:02 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|41.203.69.20
X-MailChannels-Auth-Id: wwwh
X-MC-Ingress-Time: 1410090482188
Received: from mail.icn.minsa.gob.pe ([190.12.89.67]:48739)
by r8-chicago.webserversystems.com with esmtp (Exim 4.82)
(envelope-from <[email protected]>)
id 1XQawp-000FKi-Kb
for <snipped>; Sun, 07 Sep 2014 06:48:00 -0500
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.icn.minsa.gob.pe (Postfix) with ESMTP id 7B88723CE20D;
Sun, 7 Sep 2014 05:27:13 -0500 (PET)
X-Virus-Scanned: amavisd-new at icn.minsa.gob.pe
Received: from mail.icn.minsa.gob.pe ([127.0.0.1])
by localhost (mail.icn.minsa.gob.pe [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id VJNXdJkqvri0; Sun, 7 Sep 2014 05:27:12 -0500 (PET)
Received: from [10.187.73.45] (unknown [41.203.69.20])
by mail.icn.minsa.gob.pe (Postfix) with ESMTPSA id 50B2923CE1B6;
Sun, 7 Sep 2014 05:26:34 -0500 (PET)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: Frank Moses<[email protected]>
Date: Sun, 07 Sep 2014 12:42:06 +0200
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=7.6
X-Spam-Score: 76
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: I am Frank Moses a private lender located in USA.I can help
you with a loan you are looking for @ 3% interest rate,For Urgent Response
Email: [email protected] Frank Moses. Email: [email protected]
Telephone:(781)-369-5127 [...]

Content analysis details: (7.6 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.6 URG_BIZ BODY: Contains urgent matter
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[190.12.89.67 listed in bb.barracudacentral.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
2.0 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_SMF_FM_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** LOAN OFFER
X-MC-Forward: <snipped>
X-AuthUser:


I am Frank Moses a private lender located in USA.I can help you with a loan you are looking for @ 3% interest rate,For Urgent Response Email: [email protected]



Frank Moses.
Email: [email protected]
Telephone:(781)-369-5127

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 9 guests