by Terminator5
Tue Sep 27, 2011 11:09 am
The source host name is "vc-gp-s-41-28-138-60.umts.vodacom.co.za" and the source IP address is 41.28.138.60
Geo-Location Information
Country South Africa
State/Region 06
City Johannesburg
From [email protected]
Reply to un.grant@c?ounsellor.?com
Begin Scam Email:
YOUR FAMILY 100,000.00?GBP, CONTACT WILSON KENNON ON +448447742?653, un.grant@c?ounsellor.?com
Good Day!
Email Contents:
Grant.tif image . An image of a fake UN Grant Certificate .
End Scam Email
Full Header Details:
Delivered-To: xxxxxxx
Received: by 10.180.94.170 with SMTP id dd10cs47758wib;
Tue, 27 Sep 2011 07:16:52 -0700 (PDT)
Received: by 10.68.30.199 with SMTP id u7mr37431661pbh.55.1317133010098;
Tue, 27 Sep 2011 07:16:50 -0700 (PDT)
Return-Path: <[email protected]>
Received: from p3plwbeout17-04.prod.phx3.secureserver.net (p3plsmtp17-04-2.prod.phx3.secureserver.net. [173.201.193.168])
by mx.google.com with SMTP id i3si10800269pbf.22.2011.09.27.07.16.49;
Tue, 27 Sep 2011 07:16:50 -0700 (PDT)
Received-SPF: neutral (google.com: 173.201.193.168 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=173.201.193.168;
Authentication-Results: mx.google.com; spf=neutral (google.com: 173.201.193.168 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: (qmail 16684 invoked from network); 27 Sep 2011 14:16:49 -0000
Received: from unknown (HELO localhost) (173.201.193.243)
by p3plwbeout17-04.prod.phx3.secureserver.net with SMTP; 27 Sep 2011 14:16:48 -0000
Received: (qmail 28183 invoked by uid 99); 27 Sep 2011 14:16:48 -0000
Content-Type: multipart/mixed;
boundary="=_0b84cba2a065f0032d72c19ffe5991d3"
X-Originating-IP: 41.28.138.60
User-Agent: Web-Based Email 5.6.02
Message-Id: <20110927071647.0e6d43b40f524de618edc5ecc2c19bc8.de1f6f94c9.wbe@email17.secureserver.net>
From: "UN ORG" <[email protected]>
X-Sender: [email protected]
To:
Subject: YOUR FAMILY 100,000.00GBP, CONTACT WILSON KENNON ON +448447742653 ,
[email protected]
Date: Tue, 27 Sep 2011 07:16:47 -0700
Mime-Version: 1.0
--=_0b84cba2a065f0032d72c19ffe5991d3
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"
Good Day!=0A
--=_0b84cba2a065f0032d72c19ffe5991d3
Content-Transfer-Encoding: base64
Content-Type: image/tiff;
name="GRANT.tif";
Content-Disposition: attachment;
filename="GRANT.tif";
Geo-Location Information
Country South Africa
State/Region 06
City Johannesburg
From [email protected]
Reply to un.grant@c?ounsellor.?com
Begin Scam Email:
YOUR FAMILY 100,000.00?GBP, CONTACT WILSON KENNON ON +448447742?653, un.grant@c?ounsellor.?com
Good Day!
Email Contents:
Grant.tif image . An image of a fake UN Grant Certificate .
End Scam Email
Full Header Details:
Delivered-To: xxxxxxx
Received: by 10.180.94.170 with SMTP id dd10cs47758wib;
Tue, 27 Sep 2011 07:16:52 -0700 (PDT)
Received: by 10.68.30.199 with SMTP id u7mr37431661pbh.55.1317133010098;
Tue, 27 Sep 2011 07:16:50 -0700 (PDT)
Return-Path: <[email protected]>
Received: from p3plwbeout17-04.prod.phx3.secureserver.net (p3plsmtp17-04-2.prod.phx3.secureserver.net. [173.201.193.168])
by mx.google.com with SMTP id i3si10800269pbf.22.2011.09.27.07.16.49;
Tue, 27 Sep 2011 07:16:50 -0700 (PDT)
Received-SPF: neutral (google.com: 173.201.193.168 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=173.201.193.168;
Authentication-Results: mx.google.com; spf=neutral (google.com: 173.201.193.168 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: (qmail 16684 invoked from network); 27 Sep 2011 14:16:49 -0000
Received: from unknown (HELO localhost) (173.201.193.243)
by p3plwbeout17-04.prod.phx3.secureserver.net with SMTP; 27 Sep 2011 14:16:48 -0000
Received: (qmail 28183 invoked by uid 99); 27 Sep 2011 14:16:48 -0000
Content-Type: multipart/mixed;
boundary="=_0b84cba2a065f0032d72c19ffe5991d3"
X-Originating-IP: 41.28.138.60
User-Agent: Web-Based Email 5.6.02
Message-Id: <20110927071647.0e6d43b40f524de618edc5ecc2c19bc8.de1f6f94c9.wbe@email17.secureserver.net>
From: "UN ORG" <[email protected]>
X-Sender: [email protected]
To:
Subject: YOUR FAMILY 100,000.00GBP, CONTACT WILSON KENNON ON +448447742653 ,
[email protected]
Date: Tue, 27 Sep 2011 07:16:47 -0700
Mime-Version: 1.0
--=_0b84cba2a065f0032d72c19ffe5991d3
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"
Good Day!=0A
--=_0b84cba2a065f0032d72c19ffe5991d3
Content-Transfer-Encoding: base64
Content-Type: image/tiff;
name="GRANT.tif";
Content-Disposition: attachment;
filename="GRANT.tif";
Daniel 8 :25
