Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Tue Feb 11, 2014 6:26 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 41.56.193.117<br>Originating ISP: Wbs, Wireless Business Solutions, Cape Town<br> City: Cape Town<br>Country of Origin: South Africa<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.70.5 with SMTP id b5csp2006vcj;
Mon, 10 Feb 2014 12:07:31 -0800 (PST)
X-Received: by 10.236.9.72 with SMTP id 48mr2326537yhs.138.1392062851009;
Mon, 10 Feb 2014 12:07:31 -0800 (PST)
Return-Path: <[email protected]>
Received: from ema.emagrecerdevez.com ([198.1.118.140])
by mx.google.com with ESMTPS id q48si11414672yhb.27.2014.02.10.12.07.30
for <snipped>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 10 Feb 2014 12:07:30 -0800 (PST)
Received-SPF: neutral (google.com: 198.1.118.140 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=198.1.118.140;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 198.1.118.140 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from emagrec by ema.emagrecerdevez.com with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1WCx4r-0002Rm-GJ
for <snipped>; Mon, 10 Feb 2014 13:03:37 -0700
To: <snipped>
Subject: LET DO THIS BUSINESS TOGETHER
X-PHP-Script: emagrecerdevez.com/hipertrofia/wp-admin/css/perl/q1.php for 41.56.193.117
From: JOHN BALOYE <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Mon, 10 Feb 2014 13:03:37 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ema.emagrecerdevez.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [500 500] / [47 12]
X-AntiAbuse: Sender Address Domain - ema.emagrecerdevez.com
X-Get-Message-Sender-Via: ema.emagrecerdevez.com: authenticated_id: emagrec/only user confirmed/virtual account not confirmed


I am a manager of a bank, I am in a position to move funds to you as a foreigner legally. If you are interested send me your contact details and phone number so I can call and explain details to you. John Baloye.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 23 guests