by Faizan Docherty
Sun Sep 01, 2013 9:10 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 208.43.239.35<br>Originating ISP: Hawk Host<br> City: Dallas<br>Country of Origin: United States<br>* For a complete report on this email header goto ipTRACKERonline
From Dr Paul Acquah Sat Aug 31 07:25:48 2013
X-Apparently-To: <snipped> via 98.139.210.165; Sat, 31 Aug 2013 14:26:04 +0000
Return-Path: <[email protected]>
Received-SPF: none (domain of ecowasgh.com does not designate permitted sender hosts)
<snipped>
X-YMailISG: <snipped>
X-Originating-IP: [208.43.239.35]
Authentication-Results: mta1081.mail.ne1.yahoo.com from=ecowasgh.com; domainkeys=neutral (no sig); from=ecowasgh.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO jupiter.arandomserver.com) (208.43.239.35)
by mta1081.mail.ne1.yahoo.com with SMTP; Sat, 31 Aug 2013 14:26:03 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ecowasgh.com; s=default;
h=Message-ID:Reply-To:Subject:To:From:Date:Content-Transfer-Encoding:Content-Type:MIME-Version; bh=NdmX0VcpcxagckJvl7yOL0ii3+4uwuBwNKsrKBgBZHI=;
b=du+EfEyXAv1gDCa5ERdPNfjzmE2/2yeBABNU3RNtHE13TsWm/8pA0b8BoePmLgw+5LKKOwqr7J5aQGXSGgn70SKGHQ3L1UckpKoQQPbct/ihCRWUsEwz6H2kKLMfRmvt/WyUncIgUGbxLDa5yhtQIhSI14d15fAF20a3EdNkKK0=;
Received: from localhost ([127.0.0.1]:36867 helo=jupiter.arandomserver.com)
by jupiter.arandomserver.com with esmtpa (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1VFm7Y-000RDC-9F; Sat, 31 Aug 2013 10:25:48 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Sat, 31 Aug 2013 10:25:48 -0400
From: Dr Paul Acquah <[email protected]>
To: undisclosed-recipients:;
Subject: Hello Dear:
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.9.2
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - jupiter.arandomserver.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ecowasgh.com
X-Get-Message-Sender-Via: jupiter.arandomserver.com: authenticated_id: [email protected]
Content-Length: 1261
Do you know that no matter how easy running a program may seem, it still requires that the right approach is taken to actualize success otherwise it will look very impossible to run the program?
My Proposal is simple, I wish to request for your friendship because I feel that you are a trust worthy and a sincere fellow who I can do things with. I am sorry about your recent and past experience but please give my request a favorable consideration. I work with United Bank for Africa and as the Treasury Vault Director General I am willing to move fund(s) that are about to be moved into federal Government account/Purse because there is no ownership to this fund(s). All I need from you is your interest to be my foreign partner so that things will be done with cordial relationship, equity and rationality.
We have a plan to load the funds in ATM Master Cards or Telegraphic Transfer (T/T) if accepted of my offer, i will send or bring them to you by myself so that the funds will be withdrawn on daily basis until we have the last cent received. If you assure me of your partnership I will show you the simple way this can be done and in less than five days we will both celebrate.
Thanks For Your Co-Operation as i wait for your response.
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.