Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Sun Mar 08, 2015 5:25 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 14.3.195.1
Originating ISP: Asahi Net,inc.
City: Tokyo
Country of Origin: Japan
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.43.144 with SMTP id r138csp449989lfr;
Sat, 7 Mar 2015 07:09:00 -0800 (PST)
X-Received: by 10.68.253.161 with SMTP id ab1mr35388303pbd.25.1425740939787;
Sat, 07 Mar 2015 07:08:59 -0800 (PST)
Return-Path: <[email protected]>
Received: from smtp.thainippon.co.th (POP3.THAINIPPON.CO.TH. [116.68.144.4])
by mx.google.com with ESMTPS id iw3si19795005pbb.257.2015.03.07.07.08.58
(version=TLSv1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Sat, 07 Mar 2015 07:08:59 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 116.68.144.4 as permitted sender) client-ip=116.68.144.4;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 116.68.144.4 as permitted sender) [email protected]
Received: from [37.203.214.100] (37.203.214.100) by
TNS-Exchange01.thainippon.co.th (172.17.13.5) with Microsoft SMTP Server
(TLS) id 14.3.195.1; Sat, 7 Mar 2015 22:08:26 +0700
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Compliments of the Seasons!!
To: Recipients <[email protected]>
From: <[email protected]>
Date: Sat, 7 Mar 2015 06:54:55 -0800
Reply-To: <[email protected]>
Message-ID: <d3d640ad-cac4-4790-8f9a-aee7e2bcf42a@TNS-EXCHANGE01.thainippon.co.th>
Return-Path: [email protected]
X-Originating-IP: [37.203.214.100]


Compliments,

Dear Friend,

It is my wish to solicit your assistance in a claim of $ 14,400,000.00
USD belonging to our late customer who was a gold merchant.This will
be of great benefit to both of us and I cannot achieve this without
your support, therefore I need your cooperation to claim this fund
from my
bank after which you will be eligible for 50% of the fund, while 50%
will be mine.

Please get back to me if you are interested for more
information,kindly email me
Sincerely,
Bempong Alex

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

by Faizan Docherty Sun Mar 08, 2015 6:02 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 74.62.241.210
Originating ISP: Time Warner Cable
City: Chatsworth
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.43.144 with SMTP id r138csp978143lfr;
Sun, 8 Mar 2015 10:33:25 -0700 (PDT)
X-Received: by 10.194.48.12 with SMTP id h12mr51390853wjn.74.1425836005583;
Sun, 08 Mar 2015 10:33:25 -0700 (PDT)
Return-Path: <[email protected]>
Received: from emailafrica.net (rainbowmail.co.za. [41.204.218.68])
by mx.google.com with ESMTPS id yz3si5397175wjc.10.2015.03.08.10.33.25
for <snipped>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 08 Mar 2015 10:33:25 -0700 (PDT)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=41.204.218.68;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected]
Received: from localhost (localhost [127.0.0.1])
by emailafrica.net (Postfix) with ESMTP id B1037702344
for <snipped>; Sun, 8 Mar 2015 19:33:23 +0200 (SAST)
X-Virus-Scanned: Debian amavisd-new at
Debian-71-wheezy-64-minimal.hetzner.africa
Received: from emailafrica.net ([127.0.0.1])
by localhost (emailafrica.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id YKNr8pmCaytG for <snipped>;
Sun, 8 Mar 2015 19:33:23 +0200 (SAST)
Received: from User (rrcs-74-62-241-210.west.biz.rr.com [74.62.241.210])
by emailafrica.net (Postfix) with ESMTPA id 28B777022F2;
Sun, 8 Mar 2015 19:25:24 +0200 (SAST)
Reply-To: <[email protected]>
From: "MR KANG"<[email protected]>
Subject: DON'T DOUBT ME, GET BACK TO ME TODAY.
Date: Sun, 8 Mar 2015 10:27:51 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>


Dear Friend,
It is my wish to solicit your assistance in a claim of (19.9m)
USD belonging to our late customer who was a gold merchant.This will
be of great benefit to both of us and I cannot achieve this without
your support, therefore I need your cooperation to claim this fund
from my
bank after which you will be eligible for 50% of the fund, while 50%
will be mine.
Please get back to me if you are interested for more
information,kindly email me
Sincerely,
KANG Y.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 41 guests