Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Tue Jan 13, 2015 11:55 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.190.3.192
Originating ISP: Emts-nigeria-as
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.211.135 with SMTP id k129csp1090830lfg;
Mon, 12 Jan 2015 11:09:42 -0800 (PST)
X-Received: by 10.66.120.109 with SMTP id lb13mr15565947pab.66.1421089781266;
Mon, 12 Jan 2015 11:09:41 -0800 (PST)
Return-Path: <[email protected]>
Received: from mxserver2-out3.masterweb.com (mxserver2-out3.masterweb.com. [103.25.223.22])
by mx.google.com with ESMTPS id uv6si1389472pab.41.2015.01.12.11.09.40
for <snipped>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 12 Jan 2015 11:09:41 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=103.25.223.22;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected]
Received: from jalak.n.masterweb.com ([49.50.8.72] helo=server42517x.masterweb.com)
by mxserver2.masterweb.com with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.84)
(envelope-from <[email protected]>)
id 1YAkMm-0000lO-CX
for <snipped>; Tue, 13 Jan 2015 02:09:37 +0700
Received: from k0494628 by server42517x.masterweb.com with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1YAk1Z-00008u-3l
for <snipped>; Mon, 12 Jan 2015 13:47:37 -0500
To: <snipped>
Subject: Business Cooperation
X-PHP-Script: http://www.wcimbali2016.org/headline/default/mailer.php for 41.190.3.192
From: Kuwait Point Group (KPG) <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Mon, 12 Jan 2015 13:47:37 -0500
X-Filter-ID: <snipped>
X-Report-Abuse-To: [email protected]
X-Filter-Fingerprint: <snipped>
X-Originating-IP: 49.50.8.72
X-MasterWebNetwork-Domain: server42517x.masterweb.com
X-MasterWebNetwork-Username: 49.50.8.72
Authentication-Results: masterweb.com; auth=pass smtp.auth=49.50.8.72
X-MasterWebNetwork-Outgoing-Class: unsure
X-MasterWebNetwork-Outgoing-Evidence: Combined (0.67)
X-Recommended-Action: accept


Greetings,

Our group is interested to enter into an exclusive business cooperation with your company and we remain hopeful for more discussions.

Best Wishes,

Abdul Hafiz
Kuwait Point Group (KPG)
Tel: (+973)161 98 491

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 24 guests