Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Thu Oct 02, 2014 8:53 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 209.85.213.173
Originating ISP: Google
City: Gulf Shores
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


From citi bank Wed Oct 1 09:47:51 2014
X-Apparently-To: <snipped>; Wed, 01 Oct 2014 09:47:52 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 209.85.213.173
Received-SPF: pass (domain of gmail.com designates 209.85.213.173 as permitted sender)
X-YMailISG: <snipped>
X-Originating-IP: [209.85.213.173]
Authentication-Results: mta1311.mail.gq1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-ig0-f173.google.com) (209.85.213.173)
by mta1311.mail.gq1.yahoo.com with SMTPS; Wed, 01 Oct 2014 09:47:51 +0000
Received: by mail-ig0-f173.google.com with SMTP id h18so28469igc.6
for <snipped>; Wed, 01 Oct 2014 02:47:51 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.50.32.10 with SMTP id e10mr17849060igi.7.1412156871379; Wed,
01 Oct 2014 02:47:51 -0700 (PDT)
Received: by 10.107.136.230 with HTTP; Wed, 1 Oct 2014 02:47:51 -0700 (PDT)
Date: Wed, 1 Oct 2014 04:47:51 -0500
Message-ID: <CAG_rskKxMGpJ3BOJ5vNsRi449awoEKhuF95vgcZwKgbMydN9Wg@mail.gmail.com>
Subject: CHANGE OF ACCOUNT INFO
From: citi bank <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=047d7b11198fafa9c105045964f4
Bcc: <snipped>
Content-Length: 1917


Citi Bank,Davenport Branch
3801 N Capitol Of Texas Hwy Ste B100
Austin, TX 78746
Travis County
e-mail: [email protected]


Attn: ,

I am Mr.Tommy Clark Director of international Remittance department citi bank Texas US. This is to inform you that a man came to my office with a change of account from you, please check the account bellow and confirm to this office if you really authorized this change of account.

BANK NAME: WELLS FARGO BANK.
ADDRESS: 1063 11TH ST REEDLEY CA 93654
ACCOUNT #<snipped>
ROUTING # <snipped>
BENEFICIARY NAME: JAMES WELLS.

Get back to us now so that we can remit the payment to your new bank
account.

Yours in service,
Mr Tommy Clark

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 40 guests