by Faizan Docherty
Tue Mar 12, 2013 10:48 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 65.54.190.124<br>Originating ISP: Microsoft Hosting<br> City: Redmond<br>Country of Origin: United States<br>* For a complete report on this email header goto ipTRACKERonline
From WESTERN UNION MONEY TRANSFER Sun Mar 10 11:01:57 2013
X-Apparently-To: <snipped> via 98.138.226.107; Sun, 10 Mar 2013 11:01:58 -0700
Return-Path: <[email protected]>
X-YahooFilteredBulk: 65.54.190.97
Received-SPF: pass (domain of wss-id.org designates 65.54.190.97 as permitted sender)
X-YMailISG: TtWjC_sWLDv9wCthM2C1asMY3gesXFWPa8kTZA0mzRKZQDFh
Mk4USKldlEp_NNd1bOt6hWnyXTpo9KT1m_4r30byjtwHZOyFx7Emz7588vW8
BBDyzzk_V7URMeNh0s8aUxlN2LgaSmef3HqhOfkkqB3SdOlX08PwSB78jTSq
lO9BE.1X2OX1BRtUmuYPRG_pOAdkMgVMKEWKsA91eHv5ff8I15bKe8LT..G9
hrnZwaxaNYRXYmfCgJhG0vKh49_LHdZycC60QNDmDdCHt9AxDFCF6._2RvXO
jgL6kibzR_CzygdvyxgfQlrrQfnn.pmjED6BHUgZFYNr3uMYe3qFBgMerhjl
d_sVM6l7zp_boynQaMltnH2y6.dTSIkd.A_CQwpndsc1nphfvN7Iqg.I7Myh
RN69_8W.VO.Ek29ZW8Au7x_BvBPGwhrHLTCxWYosyUuXOQX0_6LhOrVOeaHX
MgXjK2do94eqcFMsIisn9K7mB8XPrYBpWK2T51mdSPyeF0u_HCwSPrNHJ163
2iAA2xFelZruyaTw_MYMv4a_yvx7fW6oWB4bvyMidc4IQ8f1oZ7zprV9CnYH
kCkwrd7lqlXTPiegzLKtaF6jEI79QtTE4cuCY8Zl0kC6dbTfkvHcITW8dSRn
F3ltcrepOmFGZ5uA3pFNkP1qZONWU8wORLRewIQK01z_Sb0tpMACs_XVqYYo
m.1GjKyRrCd896oPcxsRezbEMcl_RhCiO0r9_o7zz3Pmm.MqtGJquZYiBAfM
hNOdkdOxd9NBby_JE48TsFaRWJ3Xcdc69F3BsWkSgD1h265iPvvoQwtxUbT5
rPrrnZvoBwv.VPbiuZStRI4wQqQQCiy2fGKtZyyfXRnlF8mHFOyzHqeHryvf
szsFxBGPwc.SBc7dnJwdk0.bbNikJ4NsOwRDunniT.OOViASf1U4vRy6odf9
ygkYpqi6F8QmDzGCqslSGI1l6eGDH4bXFlalQISHra4gLwJc423DaDH_MkH7
Eous4R23nZH7wA9a0O2dzutqHexGlFl33dZnEeU32r44T4awowSgm1KbfDq8
kBlKzRcHXGmpKjcm3hbAePw3wfdHRfp6Z8ofLeCTjyB4t188VCqrB5tTgFEN
rLjkk8uKYHxURBsm2wivqFWEgoz_PUpRiECbJerpAeBJcEkwNA8k2CWm3AfS
ZbXp7o8gTPaBS2yb_7ftSdmhzqcQp.vvLcrs8gSdLFHgci340WVzvJH9o.JC
xi8L5yLEStdbirynrX85hywG8NEa7E_CLxoJIMqBXE_WPW9vfzDjHT0Obyn_
QuuGPFedvTaZLFC8BODSPTyXf9iuRIKlz0dTM7tbHhfD6OHDDcalO2y_xw--
X-Originating-IP: [65.54.190.97]
Authentication-Results: mta1069.mail.gq1.yahoo.com from=wss-id.org; domainkeys=neutral (no sig); from=wss-id.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s22.bay0.hotmail.com) (65.54.190.97)
by mta1069.mail.gq1.yahoo.com with SMTP; Sun, 10 Mar 2013 11:01:58 -0700
Received: from BAY160-W38 ([65.54.190.124]) by bay0-omc2-s22.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 10 Mar 2013 11:01:58 -0700
X-EIP: [K08J40kolUCYpM+01QwjWb31TjWv1Ct3REyL7tafsmE=]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_92c5998f-3a69-479c-b470-8a33bdd5ae52_"
From: WESTERN UNION MONEY TRANSFER <[email protected]>
To: <snipped>
Subject: RE: Very Important
Date: Sun, 10 Mar 2013 23:31:57 +0530
Importance: Normal
In-Reply-To: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 10 Mar 2013 18:01:58.0261 (UTC) FILETIME=[5B8F8250:01CE1DB9]
Content-Length: 17418
GOOD DAY, THIS IS TO INFORM YOU THAT RECENTLY THE UNITED NATION GOVERNMENT DISCOVER THAT MORE 50 MILLION PEOPLE IN THE WORLD TODAY
LIVE BELOW $1 PER DAY, THIS IS A POVERTY ALLEVIATION GRANT. YOU WERE RANDOMLY SELECTED AMONG 5 MILLION EMAIL USER GLOBALLY YOU
CAME OUT IN THE SECOND CATEGORY AMONG 5 LUCKY WINNER TO RECEIVE THE TOTAL SUM OF US$550,000. WE HAVE BEEN MANDATED BY THE
UNITED NATION GOVERNMENT TO TRANSFER TO YOU ON A DAILY BASIS THE SUM OF $5000. PRESENTLY YOUR PAYMENT IS AVAILABLE FOR PICK UP
BY RECEIVER BUT IS CURRENTLY ON HOLD. BECAUSE YOUR PAYMENT PASS-CODE : P986 NEED TO BE ACTIVATED.
NOTE DOWN YOUR PAYMENT PASS-CODE: P986 IT NEED TO BE ACTIVATED, IMMEDIATELY YOU ACTIVATE WE WILL PUT YOUR NAME AS THE RECEIVERS NAME.
YOU NEED TO ACTIVATE YOUR PASS-CODE
https://wumt.westernunion.com/asp/order ... try=global
Below is the Western Union information for the first payment pick up:
Sender Name:
MTCN# / 7930305169
Sender First Name / Ray
Sender Last Name / Hanna
Amount / $5,000
Question: Favourite
Answer: Red
Amount: $5,000.00 USD
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.