Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Fri Jan 24, 2014 12:45 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 41.150.55.37<br>Originating ISP: Telkom Internet<br> City: Sandton<br>Country of Origin: South Africa<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.70.5 with SMTP id b5csp45682vcj;
Thu, 23 Jan 2014 15:04:53 -0800 (PST)
X-Received: by 10.236.61.136 with SMTP id w8mr9888062yhc.14.1390518293580;
Thu, 23 Jan 2014 15:04:53 -0800 (PST)
Return-Path: <[email protected]>
Received: from ichigo3.ajato.com.br (200-170-97-3.static-inova.ajato.com.br. [200.170.97.3])
by mx.google.com with ESMTP id 69si16650191yhc.16.2014.01.23.15.04.52
for <snipped>;
Thu, 23 Jan 2014 15:04:53 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 200.170.97.3 as permitted sender) client-ip=200.170.97.3;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.170.97.3 as permitted sender) [email protected]
Received: by ichigo3.ajato.com.br (Postfix, from userid 105)
id 3DD8C8C18BC; Thu, 23 Jan 2014 21:04:51 -0200 (BRST)
Received: from kon2 (kon2 [172.16.2.177]) by ichigo3.ajato.com.br (Postfix)
with ESMTP id 746F88C175D; Thu, 23 Jan 2014 21:04:50 -0200 (BRST)
Received: by kon2 (Postfix, from userid 10000) id 6F2D432A494;
Thu, 23 Jan 2014 21:04:50 -0200 (BRST)
Date: Thu, 23 Jan 2014 23:04:50 +0000
From: Sgt <[email protected]>
Reply-To: [email protected]
Subject: From: Sgt Brooks Fitte -----Serving in the military of the 1st
Armored Division in Libya

To: [email protected]
X-Authenticated-User: [email protected]
X-Mailer: Velop Mail 3
X-Originating-Ip: 41.150.55.37
Message-Id: <69430Y1390518290Y9281Ykon2@velop3>
X-Scrubber-Light: yes
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=-bxL0J0VI3bC8oQSIu2Oe"


Attns:


With a very desperate need for assistance, I have summed up courage to
contact you. I am from (will disclose this later), presently
working/serving in the military of the 1st Armored Division in Libya with
an international organization that I will also disclose later, I found
your contact particulars in an address journal.


I am seeking your assistance to evacuate the sum of (US$8.523 Million
Dollars) Eight Million five Hundred Thousand And Twenty Three Dollars to
your country or any other safe country of your choice for a profitable
/liable investments purposes , as far as I can be assured that my share
will be safe in your care until I complete my service here,this is no
stolen money, and there are no dangers involved,no string attach ,and no
hitch .


SOURCE OF THE FUNDS: Some funds in various currencies was discovered
concealed in barrels with piles of weapons and ammunitions at a location
near one of the Gaddafi's old palaces during a rescue operation, and it
was agreed by all party present that the money be shared amongst us, this
was quite an illegal thing to do, but I tell you what? no compensation can
make up for the risks we have taken with our lives in this hell hole.We
are many ,but in a seperate deals .


The above figure was given to me as my share, and to conceal this kind of
money became a problem for me, so with the help of a German contact expert
working here, and her office attached diplomatic immunity, I was able to
get the package out to a safe location entirely out of trouble spot. He
does not know the real contents of the package, and believes that it
belongs to an Asian/American who died in an air raid.

My German Associate assisted me in using an African UN Diplomatic who has
individual packages to deliver outside here and he agreed to deliver the
consignment to our agreed safe locations for the investments .

One passionate appeal if you can assure me that you are not going to
discuss this matter with a third party, should you have reasons to reject
this offer,please destroy this mail as any leakage of this information
will be too bad for us.


I do not know for how long we will remain here, and I have survived 2
suicide bomb attacks by the special grace of God, this and other reasons I
will mention later has prompted me to reach out for help, I honestly want
this matter to be resolved immediately.


Can I trust you? When you receive this letter,kindly send me an e-mail
signifying your interest including your most confidential telephone/fax
numbers for quick communication also your contact details.

This is risk free.


Respectfully.

Sgt. Brooks Fitte.
1st Armored Division in Libya

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

by Faizan Docherty Sat Feb 15, 2014 2:45 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 71.13.67.118
Originating ISP: Charter Communications
City: Portage
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.70.5 with SMTP id b5csp128550vcj;
Fri, 14 Feb 2014 14:59:36 -0800 (PST)
X-Received: by 10.14.2.193 with SMTP id 41mr5440563eef.55.1392418775224;
Fri, 14 Feb 2014 14:59:35 -0800 (PST)
Return-Path: <[email protected]>
Received: from dreamserver.local (static-217-133-58-17.clienti.tiscali.it. [217.133.58.17])
by mx.google.com with ESMTP id t5si14459447eeo.22.2014.02.14.14.59.33
for <multiple recipients>;
Fri, 14 Feb 2014 14:59:35 -0800 (PST)
Received-SPF: fail (google.com: domain of [email protected] does not designate 217.133.58.17 as permitted sender) client-ip=217.133.58.17;
Authentication-Results: mx.google.com;
spf=hardfail (google.com: domain of [email protected] does not designate 217.133.58.17 as permitted sender) [email protected]
Received: from localhost (ereg.adobe.com [127.0.0.1])
by dreamserver.local (Postfix) with ESMTP id 5C2903139DAA;
Fri, 14 Feb 2014 05:59:06 +0100 (CET)
X-Virus-Scanned: amavisd-new at dreamserver.local
Received: from dreamserver.local ([127.0.0.1])
by localhost (dreamserver.local [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id j2gkiXpW4ZR2; Fri, 14 Feb 2014 05:59:06 +0100 (CET)
Received: from User (71-13-67-118.static.aldl.mi.charter.com [71.13.67.118])
by dreamserver.local (Postfix) with ESMTPA id 50B5B3139D9B;
Fri, 14 Feb 2014 05:58:42 +0100 (CET)
Reply-To: <[email protected]>
From: "Sgt Brooks Fitte"<[email protected]>
Subject: From : Sgt Brooks Fitte .......
Date: Thu, 13 Feb 2014 20:59:17 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;


Attns:


With a very desperate need for assistance, I have summed up courage to contact you. I am from (will disclose this later), presently
working/serving in the military of the 1st Armored Division in Libya with an international organization that I will also disclose later, I found your contact particulars in an address journal.


I am seeking your assistance to evacuate the sum of (US$8.523 Million Dollars) Eight Million five Hundred Thousand And Twenty Three Dollars to your country or any other safe country of your choice for a profitable /liable investments purposes , as far as I can be assured that my share will be safe in your care until I complete my service here,this is no stolen money, and there are no dangers involved,no string attach ,and no
hitch .


SOURCE OF THE FUNDS: Some funds in various currencies was discovered concealed in barrels with piles of weapons and ammunitions at a location near one of the Gaddafi's old palaces during a rescue operation, and it was agreed by all party present that the money be shared amongst us, this was quite an illegal thing to do, but I tell you what? no compensation can make up for the risks we have taken with our lives in this hell hole.We are many ,but in a seperate deals .


The above figure was given to me as my share, and to conceal this kind of money became a problem for me, so with the help of a German contact expert working here, and her office attached diplomatic immunity, I was able to get the package out to a safe location entirely out of trouble spot. He does not know the real contents of the package, and believes that it belongs to an Asian/American who died in an air raid.

My German Associate assisted me in using an African UN Diplomatic who has individual packages to deliver outside here and he agreed to deliver the consignment to our agreed safe locations for the investments .

One passionate appeal if you can assure me that you are not going to discuss this matter with a third party, should you have reasons to reject this offer,please destroy this mail as any leakage of this information will be too bad for us.


I do not know for how long we will remain here, and I have survived 2 suicide bomb attacks by the special grace of God, this and other reasons Iwill mention later has prompted me to reach out for help, I honestly want this matter to be resolved immediately.


Can I trust you? When you receive this letter,kindly send me an e-mail signifying your interest including your most confidential telephone/fax numbers for quick communication also your contact details.

This is risk free.


Respectfully,
Sgt. Brooks Fitte

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
by buried under 419s Sun Jul 20, 2014 6:35 pm
[different script]

Delivered-To:
Received: by 10.76.122.41 with SMTP id lp9csp85547oab;
Sun, 20 Jul 2014 14:25:17 -0700 (PDT)
X-Received: by 10.70.88.230 with SMTP id bj6mr8419317pdb.55.1405891516913;
Sun, 20 Jul 2014 14:25:16 -0700 (PDT)
Return-Path: <[email protected]>
Received: from ims-online.com (mail01.ims-online.com. [64.42.15.173])
by mx.google.com with ESMTP id tc9si12229066pbc.52.2014.07.20.14.25.16
for <>;
Sun, 20 Jul 2014 14:25:16 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 64.42.15.173 as permitted sender) client-ip=64.42.15.173;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 64.42.15.173 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from localhost ([127.0.0.1])
by ims-online.com (Kerio Connect 7.1.3);
Sun, 20 Jul 2014 14:03:41 -0700
To: undisclosed-recipients:;
From: "Esther Killam" <[email protected]>
Subject: From : Sgt.Brooks Fitte-------Funds Investments
Reply-To: [email protected]
Organization: From :Sgt.Brooks Fitte ----- Funds Investment
Message-ID: <[email protected]>
Date: Sun, 20 Jul 2014 14:03:41 -0700
X-Mailer: Kerio Connect 7.1.3 WebMail
X-User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:30.0) Gecko/20100101 Firefox/30.0
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

My name is Sgt.Brooks Fitte . I am an American soldier presently on active service with Squadron battalion here in Afghanistan. I served with the Third Infantry Division in Iraq since 2003, before thousand of my lucky colleagues were pulled out in August last year, leaving my superior and myself among the unlucky ones drafted to Afghanistan where I am serving presently. During my call to duty in Iraq, my superior and I moved US$25 million ( Twenty Five Million US dollars) being part of funds recovered from late Saddam Hussein during a search in one of his palaces in 2003. Through the assistance of a Senior Red Cross Delegate to Iraq, this fund has been safely moved out of Iraq and currently deposited in a secured financial institution .

Basically, since my superior and I are not among thousands of our colleagues that were withdrawn in August, we cannot continue to keep these funds in the financial institution for as long as we remain here. Hence my superior officer has authorized me to look for a reliable and trustworthy person that could assist us to retrieve these funds from the financial institution for investment.

Once you retrieve the funds, we shall disburse it in three proportions: you will have 30% and I will have 30%, while my superior officer will have 35%. 5% will be set aside to offset all expenses that may be incurred in the process of retrieving the funds. For security reasons, this transaction must be kept very secret, and should not be disclosed to anyone else. As long as you follow my instructions, I can assure you that this transaction is 100% risk free. Due to the call of my duty here and the secret nature of this transaction, I would prefer you communicate to me through email: [email protected]

If you find my proposal interesting, reply this mail so I could send you more details.
Strictly contact me on my private e-mail : [email protected]
Respectfully submitted.

Sgt.Brooks Fitte
Squadron Battalion,
US Army Base, Afghanistan

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: ClaudeBot and 31 guests