Advance fee loan scams and fraudulent loan sites.
by Faizan Docherty Thu Oct 02, 2014 8:12 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 209.85.217.179
Originating ISP: Google
City: Mountain View
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.76.168.38 with SMTP id zt6csp476632oab;
Wed, 1 Oct 2014 10:10:28 -0700 (PDT)
X-Received: by 10.70.109.194 with SMTP id hu2mr5808597pdb.137.1412183427611;
Wed, 01 Oct 2014 10:10:27 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (nov-007-i632.relay.mailchannels.net. [46.232.183.186])
by mx.google.com with ESMTP id z3si1327531pbw.195.2014.10.01.10.10.24
for <snipped>;
Wed, 01 Oct 2014 10:10:27 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 46.232.183.186 as permitted sender) client-ip=46.232.183.186;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 46.232.183.186 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
X-Sender-Id: _forwarded-from|209.85.217.179
Received: from r8-chicago.webserversystems.com (ip-10-204-4-183.us-west-2.compute.internal [10.204.4.183])
by relay.mailchannels.net (Postfix) with ESMTPA id 9CC0F6068A
for <snipped>; Wed, 1 Oct 2014 17:10:20 +0000 (UTC)
X-Sender-Id: _forwarded-from|209.85.217.179
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.245.145.206])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.2.14);
Wed, 01 Oct 2014 17:10:23 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|209.85.217.179
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1412183422527:674621066
X-MC-Ingress-Time: 1412183422527
Received: from mail-lb0-f179.google.com ([209.85.217.179]:59057)
by r8-chicago.webserversystems.com with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1XZNPs-0005bI-Fl
for <snipped>; Wed, 01 Oct 2014 12:10:18 -0500
Received: by mail-lb0-f179.google.com with SMTP id l4so757785lbv.10
for <snipped>; Wed, 01 Oct 2014 10:10:14 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.152.19.225 with SMTP id i1mr56915926lae.21.1412183413569;
Wed, 01 Oct 2014 10:10:13 -0700 (PDT)
Received: by 10.112.129.130 with HTTP; Wed, 1 Oct 2014 10:10:13 -0700 (PDT)
Date: Wed, 1 Oct 2014 18:10:13 +0100
Message-ID: <CAPiM-kZ53Jik=qnBFHM219R6xSPpfhZZBqj2HxLJ2dASRU_9Og@mail.gmail.com>
Subject: BG / SBLC, MTN Specifically for Lease
From: Reto Tresch <[email protected]>
To: [email protected]
Content-Type: multipart/alternative; boundary=089e013d1d56b94b8905045f921e
X-Spam-Status: No, score=-1.3
X-Spam-Score: -12
X-Spam-Bar: -
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Greetings to you potential client,We Have Effective and efficient
PROVIDER who offer financial instruments such as Fresh Cut Bank Guarantee
(BG), Standby Letter of Credit (SBLC), Medium Term Note (MTN), which we have
specifically for "lease/buy". [...]

Content analysis details: (-1.3 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(bglease.tresch[at]gmail.com)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.217.179 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.5 CRM114_PROB_GOOD CRM114: CRM114_PROB_GOOD
X-Spam-Flag: NO
X-MC-Forward: <snipped>
X-AuthUser:


Greetings to you potential client,We Have Effective and efficient PROVIDER who offer financial instruments such as Fresh Cut Bank Guarantee (BG), Standby Letter of Credit (SBLC), Medium Term Note (MTN), which we have specifically for "lease/buy".

These Instruments from our investor can be professionally arranged in your name from major banks and institutions. Some of the available banks we have includes : HSBC Bank, Barclays Bank or Deutsche Bank Frankfurt. Our financial instrument can be invested into High Yield Investment Trading Program {HYITP) or Private Placement Program (PPP). All bank instruments are for lease and/or sale from a genuine and reliable source without broker chain / joker broker story or chauffer driven offer while having your required time frame in mind.
Just incase you do not know,Please note that Most banks offer SBLC/BG in US Dollars or Euros! Please take note that we strongly support the usage of our leased facilities into LARGE initiating and funding project(s) such as
Aviation
Agriculture
Petroleum
Mining
Telecommunication
Construction of Dams
Bridges
Other Turnkey Project (s) etc.
Bless You,
Reto Tresch

Contact Email: [email protected]
Skype ID: lease.tresch

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Majestic-12 [Bot] and 10 guests