Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Fri Nov 29, 2013 1:47 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 196.200.177.4<br>Originating ISP: Cnrst (centre National Pour La Recherche Scientifi<br> City: n/a<br>Country of Origin: Morocco<br>* For a complete report on this email header goto ipTRACKERonline


From Ming Yang Wed Nov 27 23:38:34 2013
X-Apparently-To: <snipped> via 72.30.238.252; Thu, 28 Nov 2013 01:20:07 -0800
Return-Path: <[email protected]>
X-YahooFilteredBulk: 196.200.177.4
Received-SPF: fail (domain of financial.com does not designate 196.200.177.4 as permitted sender)
X-YMailISG: <snipped>
X-Originating-IP: [196.200.177.4]
Authentication-Results: mta1366.mail.gq1.yahoo.com from=financial.com; domainkeys=neutral (no sig); from=financial.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO servmail.fstbm.ac.ma) (196.200.177.4)
by mta1366.mail.gq1.yahoo.com with SMTP; Thu, 28 Nov 2013 01:20:00 -0800
Received: from http://www.fstbm.ac.ma ([192.168.1.3])
by servmail.fstbm.ac.ma (8.13.1/8.13.1) with ESMTP id rAS8elmN014589;
Thu, 28 Nov 2013 08:40:47 GMT
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_def902ca4abedf3bd732cdcc2c2c3734"
Date: Thu, 28 Nov 2013 08:38:34 +0100
From: Ming Yang <[email protected]>
To: undisclosed-recipients:;
Subject: Attention: Dear Account Holder !!
Reply-To: <[email protected]>
Mail-Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.7.1
X-fstbm-MailScanner-Information: Please contact the ISP for more information
X-MailScanner-ID: rAS8elmN014589
X-fstbm-MailScanner: Found to be clean
X-fstbm-MailScanner-From: [email protected]
X-Spam-Status: No
Content-Length: 2263


--
Hang Seng Bank Ltd
Sai Wan Ho Branch
171 Shaukiwan Road
Hong Kong.

Good Day,

I am Mr. Ming Yang, Director of operations of the Hang Seng Bank Ltd, Sai Wan Ho Branch, Hong Kong. I am here-by seeking your service in helping me receive a large amount of money and in giving a clear research and feasibility studies on areas I could invest on. Your services will be paid for, and you will be a partner, if your recommendation is accepted.

For security purpose, due to telecoms interception in Hong Kong, I shall not accept or acknowledge any phone call. Only emails would be treated in relation to this proposal but not without this code; [CODE NO: AM-002].My contact: [email protected]


Kind Regards
Mr. Ming Yang

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

by Faizan Docherty Sun Dec 08, 2013 1:39 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 101.63.22.152<br>Originating ISP: Bses Telecom Limited<br> City: Mumbai<br>Country of Origin: India<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.177.2 with SMTP id bg2csp163492vcb;
Sat, 7 Dec 2013 03:26:36 -0800 (PST)
X-Received: by 10.180.211.212 with SMTP id ne20mr6423267wic.31.1386415596033;
Sat, 07 Dec 2013 03:26:36 -0800 (PST)
Return-Path: <[email protected]>
Received: from mx1.accesskenya.com (mx1.accesskenya.com. [41.206.63.41])
by mx.google.com with ESMTP id r1si822809wiv.87.2013.12.07.03.25.09
for <multiple recipients>;
Sat, 07 Dec 2013 03:26:36 -0800 (PST)
Received-SPF: neutral (google.com: 41.206.63.41 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=41.206.63.41;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 41.206.63.41 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from gw.eslgroup.co.ke (HELO eslgroup.co.ke) ([196.207.28.2])
by mx1.accesskenya.com with ESMTP; 07 Dec 2013 13:50:33 +0300
Received: from [101.63.22.152] ([101.63.22.152])
(authenticated bits=0)
by eslgroup.co.ke (8.14.4/8.14.4) with ESMTP id rB7AsaIH005542;
Sat, 7 Dec 2013 13:57:01 +0300
Message-Id: <[email protected]>
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Attention: Dear Account Holder !!
To: Recipients <[email protected]>
From: [email protected]
Date: Sat, 07 Dec 2013 16:20:02 +0530
Reply-To: [email protected]


Hang Seng Bank Ltd
Sai Wan Ho Branch
171 Shaukiwan Road
Hong Kong.

Good Day,

I am Mr. Ming Yang, Director of operations of the Hang Seng Bank Ltd, Sai Wan Ho Branch, Hong Kong. I am here-by seeking your service in helping me receive a large amount of money and in giving a clear research and feasibility studies on areas I could invest on. Your services will be paid for, and you will be a partner, if your recommendation is accepted.

For security purpose, due to telecoms interception in Hong Kong, I shall not accept or acknowledge any phone call. Only emails would be treated in relation to this proposal but not without this code; [CODE NO: AM-002].My contact: [email protected]


Kind Regards
Mr. Ming Yang

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
by Faizan Docherty Sun Dec 22, 2013 3:41 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 41.206.11.11<br>Originating ISP: Vgc Communication<br> City: n/a<br>Country of Origin: Nigeria<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.227.64.193 with SMTP id f1csp206861wbi;
Sun, 22 Dec 2013 10:49:18 -0800 (PST)
X-Received: by 10.50.43.163 with SMTP id x3mr17241470igl.41.1387738158148;
Sun, 22 Dec 2013 10:49:18 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail-relay01.etecsa.net (mail-relay01.etecsa.net. [190.6.81.239])
by mx.google.com with ESMTP id b7si16710712icq.72.2013.12.22.10.49.17
for <multiple recipients>;
Sun, 22 Dec 2013 10:49:18 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 190.6.81.239 as permitted sender) client-ip=190.6.81.239;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 190.6.81.239 as permitted sender) [email protected]
Received: from smtp.enet.cu (mail-igw1.enet.cu [172.29.9.20])
by mail-relay01.etecsa.net (Postfix) with ESMTP id C9B01E04CA;
Sun, 22 Dec 2013 13:51:06 -0500 (CST)
Received: from localhost (unknown [127.0.0.1])
by smtp.enet.cu (Postfix) with ESMTP id 1A6829F15B;
Sun, 22 Dec 2013 18:49:07 +0000 (UTC)
X-Virus-Scanned: MailFilter at enet.cu
X-Spam-Flag: YES
X-Spam-Score: 24.083
X-Spam-Level: ************************
X-Spam-Status: Yes, score=24.083 tagged_above=2 required=6.2
tests=[ADVANCE_FEE_3_NEW=0.601, ADVANCE_FEE_3_NEW_MONEY=0.001,
ADVANCE_FEE_4_NEW=0.371, ADVANCE_FEE_4_NEW_MONEY=2.628,
ADVANCE_FEE_5_NEW=0.001, ADVANCE_FEE_5_NEW_MONEY=2.175,
ALL_TRUSTED=-1, BAYES_99=3.8, HK_SCAM_N2=2.758, JM_SOUGHT_FRAUD_3=3,
LOTS_OF_MONEY=0.001, MILLION_USD=3.221, MISSING_HEADERS=1.204,
MONEY_FRAUD_3=3.522, MONEY_FRAUD_5=2.901, RP_MATCHES_RCVD=-1.111,
T_MONEY_PERCENT=0.01] autolearn=spam
Received: from localhost (mail-webfarm1.enet.cu [172.29.15.10])
by smtp.enet.cu (Postfix) with ESMTP id 530FC9F156;
Sun, 22 Dec 2013 13:49:06 -0500 (CST)
Received: from 41.206.11.11.vgccl.net (41.206.11.11.vgccl.net
[41.206.11.11]) by webmail.enet.cu (Horde Framework) with HTTP; Sun, 22 Dec
2013 13:49:06 -0500
Date: Sun, 22 Dec 2013 13:49:06 -0500
Message-ID: <[email protected]>
From: [email protected]
Subject: ***Spam*** Personal and Definate
User-Agent: Internet Messaging Program (IMP) H4 (5.0.24)
Content-Type: text/plain; charset=ISO-8859-1; format=flowed; DelSp=Yes
MIME-Version: 1.0
Content-Disposition: inline


Hello

Note: You are the sole recipient so please keep our communication confidential.

This is Mr. Clark Li, I am the Learning and Development Manager to the Hang Seng Bank in China. As a matter of fact, I am contacting you regarding the estate of Alfred and an investment placed under our bank's management 5 years ago. I would respectfully request that you keep the contents of this mail confidential and respect the integrity of the information you come by as a result of this mail. I contact you independently and no one is informed of this communication. In 2005, the subject matter, came to our bank to engage in business discussions with our private banking division. He informed us that he had a financial portfolio of 14.5 million United States dollars, which he wished to have us invest on his behalf. Based on my advice, we spun the money around various opportunities and made attractive margins for our first months of operation, the accrued profit and interest stood at this point at over 10 million United States Dollars. In mid 2007, he instructed that the principal sum (14.5M) be liquidated because he needed to make an urgent investment requiring cash payments in Hong Kong and China. We got in touch with a specialist bank in Hong Kong, Fubon Bank who agreed to receive this money for a fee and make cash available.

Fubon Bank Ltd. got in touch with us last year that this money has not been claimed. On further enquiries we found out that Alfred was involved in an accident in Mainland China, which means he died intestate. He has no next of kin and the reason I am writing you is because due to our code of conduct we are not allowed to show personal interest on funds of this nature, hence I decided to contact you due to the fact that you are based abroad. More so, I got your email address through the commerce of trade foreign division. What I propose is that since I have exclusive access to his file, you will be made the beneficiary of these funds. My bank will contact you informing you that money has been willed to you. On verification, which will be the details I make available to my bank, my bank will instruct Fubon Bank to make payments to you. You do not have to have known him. I know this might be a bit heavy for you but please trust me on this. For all your troubles I propose that we split the money in half 50% each. In the banking circle this happens every time. The other option is that the money will revert back to the state. Nobody is getting hurt; this is a lifetime opportunity for us. I hold the KEY to these funds, and as a Chinese National we see so much cash and funds being re-assigned daily. I would want us to keep communication for now strictly by this my confidential email address ([email protected]). Once again, kindly note I am a family man, I have a wife and children. I send you this mail not without a measure of fear as to the consequences, but I know within me that nothing ventured is nothing gained and that success and riches never come easy or on a platter of gold. This is the one truth I have learned from my private banking clients. Do not betray my confidence. If we can be of one accord, we should act swiftly on this.

Please get back to me immediately via my private email: [email protected]

I await your response.

Thank you in anticipation.

Clark Li

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
by Faizan Docherty Sun Feb 16, 2014 5:10 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 196.200.177.4
Originating ISP: Cnrst (centre National Pour La Recherche Scientifi
City: n/a
Country of Origin: Morocco
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.70.5 with SMTP id b5csp4551vcj;
Sat, 15 Feb 2014 00:57:51 -0800 (PST)
X-Received: by 10.194.71.47 with SMTP id r15mr9483958wju.19.1392454670890;
Sat, 15 Feb 2014 00:57:50 -0800 (PST)
Return-Path: <[email protected]>
Received: from servmail.fstbm.ac.ma ([196.200.177.4])
by mx.google.com with ESMTP id mu4si3248470wib.87.2014.02.15.00.52.50
for <multiple recipients>;
Sat, 15 Feb 2014 00:57:50 -0800 (PST)
Received-SPF: neutral (google.com: 196.200.177.4 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=196.200.177.4;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 196.200.177.4 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from http://www.fstbm.ac.ma ([192.168.1.3])
by servmail.fstbm.ac.ma (8.13.1/8.13.1) with ESMTP id s1F7rNg8030863;
Sat, 15 Feb 2014 07:53:23 GMT
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_f71181cb66c1f34d1f0bd2042053b0cd"
Date: Fri, 14 Feb 2014 22:50:09 -0800
From: Ming Yang <[email protected]>
To: undisclosed-recipients:;
Subject: Attention: Dear Account Holder !!
Reply-To: <[email protected]>
Mail-Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.7.1
X-fstbm-MailScanner-Information: Please contact the ISP for more information
X-MailScanner-ID: s1F7rNg8030863
X-fstbm-MailScanner: Found to be clean
X-fstbm-MailScanner-From: [email protected]
X-Spam-Status: No


--
Hang Seng Bank Ltd
Sai Wan Ho Branch
171 Shaukiwan Road
Hong Kong.

Good Day,

I am Mr. Ming Yang, Director of operations of the Hang Seng Bank Ltd, Sai Wan Ho Branch, Hong Kong. I am here-by seeking your service in helping me receive a large amount of money and in giving a clear research and feasibility studies on areas I could invest on. Your services will be paid for, and you will be a partner, if your recommendation is accepted.

For security purpose, due to telecoms interception in Hong Kong, I shall not accept or acknowledge any phone call. Only emails would be treated in relation to this proposal but not without this code; [CODE NO: AM-002].My contact: [email protected]


Kind Regards
Mr. Ming Yang




--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: ClaudeBot, Majestic-12 [Bot] and 31 guests