by Faizan Docherty
Thu Feb 06, 2014 10:50 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 41.71.176.154<br>Originating ISP: Visafone<br> City: Lagos<br>Country of Origin: Nigeria<br>* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.220.70.5 with SMTP id b5csp348668vcj;
Thu, 6 Feb 2014 05:01:44 -0800 (PST)
X-Received: by 10.140.94.214 with SMTP id g80mr11555684qge.19.1391691703267;
Thu, 06 Feb 2014 05:01:43 -0800 (PST)
Return-Path: <[email protected]>
Received: from cp43.myhostcenter.com (s143.n0.n84.n66.static.myhostcenter.com. [66.84.0.143])
by mx.google.com with ESMTPS id x4si497581qad.140.2014.02.06.05.00.42
for <multiple recipients>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 06 Feb 2014 05:01:43 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 66.84.0.143 as permitted sender) client-ip=66.84.0.143;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 66.84.0.143 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from localhost.localdomain ([127.0.0.1] helo=localhost)
by cp43.myhostcenter.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1WBOZ2-00089A-2T; Thu, 06 Feb 2014 08:00:20 -0500
Received: from 41.71.176.154 ([41.71.176.154]) by webmail.shaluu.com (Horde
MIME library) with HTTP; Thu, 06 Feb 2014 08:00:19 -0500
Message-ID: <[email protected]>
Date: Thu, 06 Feb 2014 08:00:19 -0500
From: "BARR. KENNETH SLESSOR" <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
Subject: Dear Friend, Reconfirm Information Your Fund Is Ready
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
User-Agent: Internet Messaging Program (IMP) H3 (4.1.6)
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cp43.myhostcenter.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
Dear Friend,
I am very happy to inform you about my success in getting that Fund transferred
with a help of one partner in China.
I did not forget all the efforts and expenses you made in the past. Now I
want you to contact my secretary and ask her for a Certified Cheque worth of
USD$2.5 Million which I kept for you as a compensation for your past efforts
towards this transactions assistance to me.
Her contact details are below;
NAME: MRS. CYNTHIA ROBINSON
EMAIL: [email protected]
Kindly reconfirm to her the following below information:
Your full name______
Your address________
Your country________
Your age____________
Your occupation_____
Your Phone number___
Note that if you did not send her the above information complete, she will not
release the cheque to you because she has to be sure that it is you.
Also note that I am out of my country at this moment because I am currently in
London for investment trip with my share.
Yours Faithfully,
BARR. KENNETH SLESSOR
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.