Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Mon Dec 01, 2014 3:12 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.78.103.186
Originating ISP: Simbanet-nigeria
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.145.137 with SMTP id t131csp272680lfd;
Mon, 1 Dec 2014 04:00:28 -0800 (PST)
X-Received: by 10.66.154.10 with SMTP id vk10mr97673756pab.26.1417435227473;
Mon, 01 Dec 2014 04:00:27 -0800 (PST)
Return-Path: <[email protected]>
Received: from a1.viralhosts.com (a1.viralhosts.com. [209.17.191.55])
by mx.google.com with ESMTPS id nv5si27295445pbc.85.2014.12.01.04.00.26
for <snipped>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 01 Dec 2014 04:00:27 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=209.17.191.55;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected]
Received: from u2832d48 by a1.viralhosts.com with local (Exim 4.84)
(envelope-from <[email protected]>)
id 1XvPeS-0000Xv-Ox
for <snipped>; Mon, 01 Dec 2014 07:00:24 -0500
To: <snipped>
Subject: Re
X-PHP-Script: http://www.alicia-mygallery.viralhosts. ... zzzzzz.php for 41.78.103.186
Date: Mon, 1 Dec 2014 12:00:24 +0000
From: DONNA RUPP <[email protected]>
Reply-to: [email protected]
Message-ID: <227614c221e86d91c799e55f1bdc6848@www.alicia-mygallery.viralhosts.com>
X-Priority: 3
X-Mailer: PHPMailer [version ]
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="iso-8859-1"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - a1.viralhosts.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [1931 501] / [47 12]
X-AntiAbuse: Sender Address Domain - a1.viralhosts.com
X-Get-Message-Sender-Via: a1.viralhosts.com: authenticated_id: u2832d48/only user confirmed/virtual account not confirmed
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/u2832d48/public_html/mzzzzzzzz.php
X-Source-Dir: alicia-mygallery.viralhosts.com:/public_html


WELCOME TO CADENCE BANK USA
FROM THE DESK OF DONNA RUPP
TRANSFER & COMMUNICATIONS MANAGER,
CADENCE BANK
1516 U.S. Highway 45 North
Columbus, MS 39701


REFERENCE IDENTIFICATION: EA2948-910/CA-BKUS-13


My name is DONNA RUPP , this bank has a mandate to recover unpaid debts associated with NNPC contracts, Lottery fund, Inheritance fund, Loans and Grants ETC ranging from $1M-$19.5M owed to various beneficiaries and companies across the Globe (Asia, Europe, USA, Africa, and Australia)and submit the list of the unpaid beneficiaries/companies to the official paying Bank for immediate payment of the fund.


However, we received a petition today from your relation/representative, Mrs. J.A. Paulson, that you are dead, According to her, you died in Auto crash as such your fund should be paid into her Bank account details with Bangkok Bank for the transfer of the fund to her. Her Bank account is stated below;


Bank Name : Bangkok Bank
Bank Address: 36 soi srinakarin Road 10100 Bangkok, Thailand
Bank Phone: (662) 273-9790
Swift Code: <snipped>
Account Number: <snipped>
Account Name: JA Investments Inc.



To avoid undue delay or paying the fund to wrong individual/beneficiary, I have decided to contact you for confirmation. If I fail to hear from you after 72 hours, it will be assumed that the petition of Mrs. J.A. Paulson is true and the fund will be paid to her without further delay.



Therefore, if you are still alive, reconfirm your particulars,

1. Full Name:____________________________
2. Address:______________________________
3. Nationality:____________Sex___________
4. Age:____________Date of Birth:________
5. Occupation:___________________________
6. Phone:__________________Fax:___________
7. Copy of int'l passport or any scanned identity to prove yourself

we want you to send to us the following documents listed bellow as the fund owner

a) IRREVOCABLE PRESIDENTIAL RELEASE ORDER CERTIFICATE
b) CONTRACT DEED OF AGREEMENT BLUE PRINT
c) 3 YEARS TAX CLEARANCE CERTIFICATE FROM THE UNITED STATE INTERNAL REVENUE SERVICE (IRS.) i.e., past 3 years as the BENEFICIARY of this said fund.

More important mention in reply how you want your fund paid to you immediately for the attention of the paying officer.



Yours Sincerely,

DONNA RUPP
TRANSFER & COMMUNICATIONS MANAGER,
CADENCE BANK USA

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 30 guests