Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Fri Jan 16, 2015 4:22 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 209.85.215.66
Originating ISP: Google
City: Mountain View
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.51.10 with SMTP id g10csp1862210pdo;
Wed, 14 Jan 2015 14:01:40 -0800 (PST)
X-Received: by 10.70.43.144 with SMTP id w16mr253804pdl.62.1421272900670;
Wed, 14 Jan 2015 14:01:40 -0800 (PST)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (aso-006-i429.relay.mailchannels.net. [174.136.13.86])
by mx.google.com with ESMTP id fc3si32451901pad.15.2015.01.14.14.01.39
for <snipped>;
Wed, 14 Jan 2015 14:01:40 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 174.136.13.86 as permitted sender) client-ip=174.136.13.86;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 174.136.13.86 as permitted sender) [email protected];
dkim=fail [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
X-Sender-Id: _forwarded-from|209.85.215.66
Received: from r8-chicago.webserversystems.com (ip-10-204-4-183.us-west-2.compute.internal [10.204.4.183])
by relay.mailchannels.net (Postfix) with ESMTPA id 290E1120259
for <snipped>; Wed, 14 Jan 2015 22:01:37 +0000 (UTC)
X-Sender-Id: _forwarded-from|209.85.215.66
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.245.17.46])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.4.2);
Wed, 14 Jan 2015 22:01:37 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|209.85.215.66
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1421272897352:260029949
X-MC-Ingress-Time: 1421272897352
Received: from mail-la0-f66.google.com ([209.85.215.66]:48527)
by r8-chicago.webserversystems.com with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1YBW0N-000DYT-Fe
for <snipped>; Wed, 14 Jan 2015 16:01:36 -0600
Received: by mail-la0-f66.google.com with SMTP id gd6so2121598lab.1
for <snipped>; Wed, 14 Jan 2015 14:01:34 -0800 (PST)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.112.47.135 with SMTP id d7mr6388508lbn.54.1421272894033;
Wed, 14 Jan 2015 14:01:34 -0800 (PST)
Received: by 10.25.163.77 with HTTP; Wed, 14 Jan 2015 14:01:33 -0800 (PST)
Date: Wed, 14 Jan 2015 22:01:33 +0000
Message-ID: <CAMqCB54yf0XsW56+0_s5Be9QnUf4vYivzGSe=ePfFo65_8spqg@mail.gmail.com>
From: CAMARA DIALLO <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
X-Spam-Status: Yes, score=10.4
X-Spam-Score: 104
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: FROM THE DESK OF MANAGER AFRICAN DEVELOPMENT BANK E-MAIL:
[email protected] DEAR FRIEND, RE:REMITTANCE OF US$20, 000 000 00 MILLION
[...]

Content analysis details: (10.4 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(dialloc721[at]gmail.com)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.215.66 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (dialloc721[at]gmail.com)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
1.0 FREEMAIL_REPLY From and body contain different freemails
2.5 TVD_PH_BODY_META TVD_PH_BODY_META
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** REMITTANCE OF US$20, 000 000 00 MILLION
X-AuthUser:


FROM THE DESK OF MANAGER AFRICAN DEVELOPMENT BANK
E-MAIL: [email protected]

DEAR FRIEND,

RE:REMITTANCE OF US$20, 000 000 00 MILLION


MY NAME IS MR. HAVID BREWS. I AM THE REGIONAL MANAGER OFAFRICAN
DEVELOPMENT BANK MALI. I GOT YOUR INFORMATION FROM A FRIEND WHO IS A MEMBER
OF OUR TRADE MISSION. I WRITE YOU THIS PROPOSAL IN GOOD FAITH. I AM 42
YEARS OLD MARRIED WITH TWO LOVELY KIDS.I AM A DEVOTED MUSLIM. I HAVE
PACKAGED A FINANCIAL TRANSACTION THAT WILL BENEFIT YOU AND I. IT IS MY DUTY
TO SEND IN A FINANCIAL REPORT TO MY HEAD OFFICE IN TUNISIA AT THE END OF
EACH BUSINESS YEAR. IN THE COURSE OF THE LAST YEAR BUSINESS REPORT, I
DISCOVERED THAT MY REGION IN WHICH I AM THE MANAGER MADE XOF
$20, 000 000 00 UNACCOUNTED INTEREST FROM LARGE UN/FRANCE FUND TRANSFER
FOR THE FUNDING THE WAR AGAINST TERRORISM IN MALI.

I HAVE PLACED THIS FUNDS IN ESCROW / SUNDRY ACCOUNT WITH NO BENEFICIARY. AS
AN OFFICER OF THIS BANK I CAN NOT BE DIRECTLY CONNECTED TO THIS MONEY. SO
MY AIM OF CONTACTING YOU IS TO ASSIST ME RECEIVE THIS MONEY IN YOUR BANK
ACCOUNT AND GET 25% OF THE TOTAL FUNDS AS COMMISSION.

THERE ARE PRACTICALLY NO RISK INVOLVED I ASSURED YOU THAT. IT WILL BE A
BANK TO BANK TRANSFER; ALL I NEED FROM YOU AS A FOREIGNER IS TO STAND TO
CLAIM AS THE ORIGINAL DEPOSITOR OF THIS FUND WHO MADE THE DEPOSIT WITH MY
BRANCH SO THAT MY HEAD OFFICE CAN ORDER THE TRANSFER TO YOUR DESIGNATED
BANK ACCOUNT WITH IMMEDIATELY EFFECT, AS I HAVE ALREADY CONCLUDED WITH ALL
ARRANGEMENT TO MOVE THIS FUND SUCCESSFULLY IN YOUR ACCOUNT WITH THE POWER
OF MY POSITION AS A MANAGER.

IF YOU ACCEPT TO WORK WITH ME WITH HONESTY AND SINCERITY I WILL APPRECIATE
IT VERY MUCH. I WILL FURNISH YOU WITH DETAILS UPON RECEIPT OF YOUR RESPONSE
THROUGH THE ABOVE EMAIL ADDRESS AND WITH HOPE YOU WILL NOT DISSAPPOINT OR
DENY ME WHEN THIS FUND GETS INTO YOUR ACCOUNT.

THANKING YOU IN ADVANCE AND MAY GOD BLESS YOU AND YOUR FAMILY.

PLEASE FOR MORE PRIVACY KINDLY REPLY VIA THIS EMAIL:
[email protected]

YOURS TRULY
MR. HAVID BREWS.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 29 guests