Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Sat Nov 30, 2013 2:23 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 200.206.211.147<br>Originating ISP: Vivo<br> City: Cotia<br>Country of Origin: Brazil<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.177.2 with SMTP id bg2csp106620vcb;
Fri, 29 Nov 2013 10:41:16 -0800 (PST)
X-Received: by 10.229.5.4 with SMTP id 4mr89133618qct.2.1385750476032;
Fri, 29 Nov 2013 10:41:16 -0800 (PST)
Return-Path: <[email protected]>
Received: from smtp.anmat.gov.ar (mail.anmat.gov.ar. [200.68.81.36])
by mx.google.com with SMTP id hb10si39000933qeb.8.2013.11.29.10.41.15
for <snipped>;
Fri, 29 Nov 2013 10:41:16 -0800 (PST)
Received-SPF: neutral (google.com: 200.68.81.36 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=200.68.81.36;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 200.68.81.36 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Message-Id: <[email protected]>
Received: from (unknown [192.168.2.5]) by smtp.anmat.gov.ar with smtp
id 38bf_9bba_d02247b2_5925_11e3_99cb_a4badbdf82c6;
Fri, 29 Nov 2013 16:41:11 -0200
Received: from User by webmail.anmat.gov.ar (MDaemon PRO v12.5.6)
with ESMTP id md50002986367.msg
for <snipped>; Fri, 29 Nov 2013 15:41:19 -0300
X-Spam-Processed: webmail.anmat.gov.ar, Fri, 29 Nov 2013 15:41:19 -0300
(not processed: spam filter heuristic analysis disabled)
X-Authenticated-Sender: [email protected]
X-MDRemoteIP: 200.206.211.147
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
X-MDaemon-Deliver-To: <snipped>
Reply-To: <[email protected]>
From: "Timothy Jones"<[email protected]>
Subject: GOOD DEAL.
Date: Fri, 29 Nov 2013 16:41:05 -0200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000


Dear Friend,
I must apologize for contacting you through this means but due to the
nature of this deal I am oblige to do so. There is a deposit of Seventeen
Million Dollars belonging to my late client in a Private bank and I will
request your interest to lay claims on this funds as I have all the
documents to convince the bank that you’re the next of kin to him since
you share the same background and will make it easier for the funds
deposited by my late client according the country's inheritance law.
I will give you more details on hearing from you. Contact me here:
[email protected]
Regards,
Timothy Jones

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

by Faizan Docherty Sun Dec 08, 2013 1:50 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 200.206.211.147<br>Originating ISP: Vivo<br> City: Cotia<br>Country of Origin: Brazil<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.177.2 with SMTP id bg2csp11607vcb;
Sat, 7 Dec 2013 16:16:13 -0800 (PST)
X-Received: by 10.68.88.37 with SMTP id bd5mr7487994pbb.53.1386461772770;
Sat, 07 Dec 2013 16:16:12 -0800 (PST)
Return-Path: <[email protected]>
Received: from MAIL.altek.com.cn (mail.altek.com.cn. [218.4.110.137])
by mx.google.com with ESMTPS id im7si2029948pbd.101.2013.12.07.16.16.11
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sat, 07 Dec 2013 16:16:12 -0800 (PST)
Received-SPF: neutral (google.com: 218.4.110.137 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=218.4.110.137;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 218.4.110.137 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from localhost (localhost.altek.com.cn [127.0.0.1])
by MAIL.altek.com.cn (Postfix) with ESMTP id 5845A8A2CC;
Sun, 8 Dec 2013 05:57:58 +0800 (CST)
X-Virus-Scanned: amavisd-new at altek.com.cn
Received: from CNMAIL03.altek.c.t (unknown [192.168.11.99])
by MAIL.altek.com.cn (Postfix) with ESMTP id DBC0B8A98F;
Sun, 8 Dec 2013 05:57:56 +0800 (CST)
Received: from User ([200.206.211.147]) by CNMAIL03.altek.c.t with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 8 Dec 2013 05:51:33 +0800
Reply-To: <[email protected]>
From: "Timothy Jones"<[email protected]>
Subject: GOOD DEAL..
Date: Sat, 7 Dec 2013 19:51:44 -0200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-OriginalArrivalTime: 07 Dec 2013 21:51:34.0049 (UTC) FILETIME=[7EEDF110:01CEF396]
To: undisclosed-recipients:;


Dear Friend,
I must apologize for contacting you through this means but due to the
nature of this deal I am oblige to do so. There is a deposit of Seventeen
Million Dollars belonging to my late client in a Private bank and I will
request your interest to lay claims on this funds as I have all the
documents to convince the bank that you’re the next of kin to him since
you share the same background and will make it easier for the funds
deposited by my late client according the country's inheritance law.
I will give you more details on hearing from you. Contact me here:
[email protected]
Regards,
Timothy Jones

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 18 guests