Advance fee loan scams and fraudulent loan sites.
by Faizan Docherty Sat Oct 18, 2014 7:55 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 209.85.212.172
Originating ISP: Google
City: Mountain View
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.125.234 with SMTP id mt10csp14301pdb;
Thu, 16 Oct 2014 02:40:32 -0700 (PDT)
X-Received: by 10.70.103.204 with SMTP id fy12mr199783pdb.110.1413452431982;
Thu, 16 Oct 2014 02:40:31 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (si-002-i152.relay.mailchannels.net. [108.178.49.164])
by mx.google.com with ESMTP id rp11si18588168pab.22.2014.10.16.02.40.30
for <snipped>;
Thu, 16 Oct 2014 02:40:31 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 108.178.49.164 as permitted sender) client-ip=108.178.49.164;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 108.178.49.164 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
X-Sender-Id: _forwarded-from|209.85.212.172
Received: from r8-chicago.webserversystems.com (ip-10-213-14-133.us-west-2.compute.internal [10.213.14.133])
by relay.mailchannels.net (Postfix) with ESMTPA id 8C62410001C
for <snipped>; Thu, 16 Oct 2014 09:40:29 +0000 (UTC)
X-Sender-Id: _forwarded-from|209.85.212.172
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.252.6.112])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.2.14);
Thu, 16 Oct 2014 09:40:29 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|209.85.212.172
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1413452429781:3340790494
X-MC-Ingress-Time: 1413452429781
Received: from mail-wi0-f172.google.com ([209.85.212.172]:38723)
by r8-chicago.webserversystems.com with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1XehXl-00030L-Pp
for <snipped>; Thu, 16 Oct 2014 04:40:28 -0500
Received: by mail-wi0-f172.google.com with SMTP id n3so951140wiv.11
for <snipped>; Thu, 16 Oct 2014 02:40:24 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.194.122.104 with SMTP id lr8mr352819wjb.64.1413452423988;
Thu, 16 Oct 2014 02:40:23 -0700 (PDT)
Sender: [email protected]
Received: by 10.194.5.38 with HTTP; Thu, 16 Oct 2014 02:40:23 -0700 (PDT)
Date: Thu, 16 Oct 2014 10:40:23 +0100
X-Google-Sender-Auth: WHyQ6Wn06o9JqRFSUWbJ8j3WMZw
Message-ID: <CAEuf4o2ruq=nSi4Ahn3_jnizdu47korDa4-aHtv4ahQ6i5PV0Q@mail.gmail.com>
Subject: BG / SBLC, MTN Specifically for Lease
From: Reto tresch <[email protected]>
To: [email protected]
Content-Type: multipart/alternative; boundary=089e01228d3ea39a2c05058709ac
X-Spam-Status: No, score=-0.5
X-Spam-Score: -4
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Greetings to you potential client,We Have Effective and efficient
PROVIDER who offer financial instruments such as Fresh Cut Bank Guarantee
(BG), Standby Letter of Credit (SBLC), Medium Term Note (MTN), which we have
specifically for "lease/buy". [...]

Content analysis details: (-0.5 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.212.172 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(elvisvan09[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (elvisvan09[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
X-Spam-Flag: NO
X-MC-Forward: <snipped>
X-AuthUser:


Greetings to you potential client,We Have Effective and efficient PROVIDER who offer financial instruments such as Fresh Cut Bank Guarantee (BG), Standby Letter of Credit (SBLC), Medium Term Note (MTN), which we have specifically for "lease/buy".

These Instruments from our investor can be professionally arranged in your name from major banks and institutions. Some of the available banks we have includes : HSBC Bank, Barclays Bank or Deutsche Bank Frankfurt. Our financial instrument can be invested into High Yield Investment Trading Program {HYITP) or Private Placement Program (PPP). All bank instruments are for lease and/or sale from a genuine and reliable source without broker chain / joker broker story or chauffer driven offer while having your required time frame in mind.
Just incase you do not know,Please note that Most banks offer SBLC/BG in US Dollars or Euros! Please take note that we strongly support the usage of our leased facilities into LARGE initiating and funding project(s) such as
Aviation
Agriculture
Petroleum
Mining
Telecommunication
Construction of Dams
Bridges
Other Turnkey Project (s) etc.
Bless You,
Reto Tresch

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 8 guests