Advance fee loan scams and fraudulent loan sites.
by Faizan Docherty Tue Jan 06, 2015 3:07 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 217.12.9.13
Originating ISP: Yahoo! Europe
City: n/a
Country of Origin: United Kingdom
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.211.135 with SMTP id k129csp3576016lfg;
Mon, 5 Jan 2015 02:55:47 -0800 (PST)
X-Received: by 10.68.240.233 with SMTP id wd9mr116380019pbc.69.1420455346170;
Mon, 05 Jan 2015 02:55:46 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm32-vm3.bullet.mail.gq1.yahoo.com (nm32-vm3.bullet.mail.gq1.yahoo.com. [98.136.216.226])
by mx.google.com with ESMTPS id po4si75624863pdb.150.2015.01.05.02.55.44
for <snipped>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Mon, 05 Jan 2015 02:55:46 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=98.136.216.226;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.fr
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>;
Received: from [127.0.0.1] by nm32.bullet.mail.gq1.yahoo.com with NNFMP; 05 Jan 2015 10:55:40 -0000
Received: from [98.137.12.56] by nm32.bullet.mail.gq1.yahoo.com with NNFMP; 05 Jan 2015 10:52:41 -0000
Received: from [212.82.98.52] by tm1.bullet.mail.gq1.yahoo.com with NNFMP; 05 Jan 2015 10:52:41 -0000
Received: from [212.82.98.90] by tm5.bullet.mail.ir2.yahoo.com with NNFMP; 05 Jan 2015 10:52:41 -0000
Received: from [127.0.0.1] by omp1027.mail.ir2.yahoo.com with NNFMP; 05 Jan 2015 10:52:40 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 217.12.9.13; Mon, 05 Jan 2015 10:52:40 +0000
Date: Mon, 5 Jan 2015 10:52:40 +0000 (UTC)
From: Albert Avril <[email protected]>
Reply-To: Albert Avril <[email protected]>
Message-ID: <2046726499.4568505.1420455160130.JavaMail.yahoo@jws11167.mail.ir2.yahoo.com>
Subject: Lån tjänst
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_4568504_1529696623.1420455160128"
Content-Length: 1169


Hej Sir och fru, Du måste göra ett lån, men du är rejettés av samtliga institutioner eller bank förbjudna, endast en adress: [email protected]. Jag beviljar lån i en takt av 2% per år i alla länder.


Google translation:

Hi Sir and Madam, You have to make a loan, but you are rejettés of all institutions or bank banned, only one address: [email protected] . I grant loans at a rate of 2% per year in all countries.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 3 guests