by Faizan Docherty
Fri Nov 14, 2014 11:45 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 154.120.91.221
Originating ISP: Spectranet
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.220.78.147 with SMTP id l19csp213145vck;
Fri, 14 Nov 2014 05:25:07 -0800 (PST)
X-Received: by 10.140.92.134 with SMTP id b6mr11000382qge.25.1415971506746;
Fri, 14 Nov 2014 05:25:06 -0800 (PST)
Return-Path: <[email protected]>
Received: from oms-m05.mx.aol.com (oms-m05.mx.aol.com. [64.12.133.81])
by mx.google.com with ESMTPS id u4si5617544qak.28.2014.11.14.05.25.04
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Fri, 14 Nov 2014 05:25:06 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.133.81 as permitted sender) client-ip=64.12.133.81;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 64.12.133.81 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=aol.com
Message-Id: <546602b2.c450e00a.5917.ffffb568SMTPIN_ADDED_MISSING@mx.google.com>
Received: from omr-m4.mx.aol.com (omr-m4.mx.aol.com [64.12.226.25])
(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
(No client certificate requested)
by oms-m05.mx.aol.com (AOL Outbound OMS Interface) with ESMTPS id 86C77380022FB
for <snipped>; Fri, 14 Nov 2014 08:23:49 -0500 (EST)
Received: from mtaout-aac02.mx.aol.com (mtaout-aac02.mx.aol.com [172.27.2.34])
by omr-m4.mx.aol.com (Outbound Mail Relay) with ESMTP id 79F2F380000E6
for <snipped>; Fri, 14 Nov 2014 08:23:47 -0500 (EST)
Received: from system15 (unknown [154.120.91.221])
by mtaout-aac02.mx.aol.com (MUA/Third Party Client Interface) with ESMTPA id 3D8713800009E
for <snipped>; Fri, 14 Nov 2014 08:23:44 -0500 (EST)
From: "ALEX STARLEY" <[email protected]>
Subject: REF/PAYMENTS CODE: 03354.
To: <snipped>
Content-Type: multipart/alternative; boundary="2ZI7obsANUO7xiEps7PHHtC3kR=_DeewId0"
MIME-Version: 1.0
Reply-To: [email protected]
Date: Fri, 14 Nov 2014 14:23:11 +0100
x-aol-global-disposition: S
X-SPAM-FLAG: YES
DKIM-Signature: <snipped>
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1b0222546602606e5e
X-AOL-IP: 154.120.91.221
PAYMENTS UNIT.
REF/PAYMENTS CODE: 03354.
Attention: Beneficiary,
RE-OUTSTANDING PAYMENT
This is to inform you of your long overdue Payment outstanding in our Banking records. I saw your name in our Central Computer vetting system among our unpaid inheritance claims individuals and have to update your information’s through this email contact for your immediate confirmation.
Your name appeared among the beneficiaries who will be receiving their over due contract payment of US$10.5m. (Ten million and five hundred thousand United State dollars) and it has been approved already for payment some days ago. However we received an email from one Mr. Edward C. Ringer of Tampa Bay, Florida who told us that he is your next of kin and that you died in a car accident last four months back. He has also submitted his account information’s to the office department for transfer of the fund to him as your inheritor.
Below are the new banking details as received from
Mr. Edward C.Ringer.
Bank name: Bank of America
Address: 6901 Northwest Expressway Oklahoma City, Oklahoma 73132
<snipped> (all other)ABA: <snipped>
(International)ACCT. #:<snipped>
ACCT Name: FMS Investments Inc.
We are now verifying by contacting you through your email address as we have in our Bank records before we can make the transfer into his account and for us to conclude confirmation if you are dead or not. Please, confirm response immediately before our action release of the outstanding payment against your name listed out. Upon this, I request you send your full personal information as soon as possible to enable this department finalize the transfer of the fund release to your nominated Bank Account.
Once again, I apologize to you on behalf of International Monetary fund Agency towards this contact and proper confirmation required urgently from you if alive.
Yours Sincerely,
MR ALEX STARLEY
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.