Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Sun Nov 24, 2013 2:02 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 208.122.244.10<br>Originating ISP: Juch-tech<br> City: n/a<br>Country of Origin: Satellite Provider<br>* For a complete report on this email header goto ipTRACKERonline


From Ms ROSE RIGHT Sat Nov 16 02:03:07 2013
X-Apparently-To: <snipped> via 72.30.239.32; Sun, 24 Nov 2013 04:40:58 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 85.25.148.15
Received-SPF: none (domain of hotel771.web-server1.com does not designate permitted sender hosts)
X-YMailISG: <snipped>
X-Originating-IP: [85.25.148.15]
Authentication-Results: mta1460.mail.gq1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO hotel771.web-server1.com) (85.25.148.15)
by mta1460.mail.gq1.yahoo.com with SMTP; Sun, 24 Nov 2013 04:40:57 +0000
Received: from sadok by hotel771.web-server1.com with local (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1VhciZ-000eKL-Af
for <snipped>; Sat, 16 Nov 2013 11:03:07 +0100
To: <snipped>
Subject: VERY URGENT AND CONFIDENTIAL
X-PHP-Script: sadok-kouka.com/images/libmail.php for 208.122.244.10
From: Ms ROSE RIGHT <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Sat, 16 Nov 2013 11:03:07 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - hotel771.web-server1.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [546 547] / [47 12]
X-AntiAbuse: Sender Address Domain - hotel771.web-server1.com
X-Get-Message-Sender-Via: hotel771.web-server1.com: authenticated_id: sadok/only user confirmed/virtual account not confirmed
Content-Length: 285


Dear Beneficiary,
Kindly contact Prof.Mark Nnaji at [email protected] for an urgent notification on a grant from the United Nations Organizations. Please it is very important and confidential that you must contact him immediately.
Thanks for your prompt response.
Ms ROSE RIGHT

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

by Faizan Docherty Fri Nov 29, 2013 12:53 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 208.122.244.10<br>Originating ISP: Juch-tech<br> City: n/a<br>Country of Origin: Satellite Provider<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.177.2 with SMTP id bg2csp8857vcb;
Thu, 28 Nov 2013 04:10:49 -0800 (PST)
X-Received: by 10.14.150.5 with SMTP id y5mr325700eej.73.1385640649025;
Thu, 28 Nov 2013 04:10:49 -0800 (PST)
Return-Path: <[email protected]>
Received: from hotel771.web-server1.com (hotel771.startdedicated.com. [85.25.148.15])
by mx.google.com with ESMTPS id s8si33420405eeh.167.2013.11.28.04.10.46
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 28 Nov 2013 04:10:47 -0800 (PST)
Received-SPF: neutral (google.com: 85.25.148.15 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=85.25.148.15;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 85.25.148.15 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from sadok by hotel771.web-server1.com with local (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1VhcRA-000HPy-SD
for <snipped>; Sat, 16 Nov 2013 10:45:09 +0100
To: <snipped>
Subject: VERY URGENT AND CONFIDENTIAL
X-PHP-Script: sadok-kouka.com/images/libmail.php for 208.122.244.10
From: Ms ROSE RIGHT <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Sat, 16 Nov 2013 10:45:08 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - hotel771.web-server1.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [546 547] / [47 12]
X-AntiAbuse: Sender Address Domain - hotel771.web-server1.com
X-Get-Message-Sender-Via: hotel771.web-server1.com: authenticated_id: sadok/only user confirmed/virtual account not confirmed


Dear Beneficiary,
Kindly contact Prof.Mark Nnaji at [email protected] for an urgent notification on a grant from the United Nations Organizations. Please it is very important and confidential that you must contact him immediately.
Thanks for your prompt response.


Ms ROSE RIGHT

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: Bing [Bot], ClaudeBot, Google [Bot] and 27 guests