Scams re-targeting those who have already been victimized
#189759 by Faizan Docherty Mon Feb 03, 2014 1:36 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 41.79.218.114<br>Originating ISP: Spacetel<br> City: n/a<br>Country of Origin: Benin<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.70.5 with SMTP id b5csp80052vcj;
Sun, 2 Feb 2014 09:38:04 -0800 (PST)
X-Received: by 10.68.130.169 with SMTP id of9mr32779727pbb.79.1391362684093;
Sun, 02 Feb 2014 09:38:04 -0800 (PST)
Return-Path: <[email protected]>
Received: from m85-61.yeah.net (m161-178.yeah.net. [123.58.178.161])
by mx.google.com with ESMTP id eb3si17700996pbc.56.2014.02.02.09.37.30
for <multiple recipients>;
Sun, 02 Feb 2014 09:38:04 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 123.58.178.161 as permitted sender) client-ip=123.58.178.161;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 123.58.178.161 as permitted sender) [email protected];
dkim=pass (test mode) [email protected]
DKIM-Signature: <snipped>
Received: from georgejumbo2$yeah.net ( [41.79.217.119, 41.79.218.114] ) by
ajax-webmail-app12 (Coremail) ; Mon, 3 Feb 2014 01:36:08 +0800 (CST)
X-CM-HeaderCharset: UTF-8
X-Originating-IP: [41.79.217.119, 41.79.218.114]
Date: Mon, 3 Feb 2014 01:36:08 +0800 (CST)
From: georgejumbo2 <[email protected]>
Subject: Re!!Re!!Re!!
X-Priority: 3
X-Mailer: Coremail Webmail Server Version SP_ntes V3.5 build
20131204(24406.5820.5783) Copyright (c) 2002-2014 http://www.mailtech.cn yeah
X-CM-CTRLDATA: MzrBT2Zvb3Rlcl9odG09MjUzOToxODg=
Content-Type: multipart/alternative;
boundary="----=_Part_722_1946664666.1391362568364"
MIME-Version: 1.0
Message-ID: <[email protected]>
X-CM-TRANSID:PVUQrED5pEAIgu5S6HUeAA--.22367W
X-CM-SenderInfo: xjhr2wphmxzuzrs65vtdko0vbw/1tbiBQgmOlGR3FC8DQABst
X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU==


Attention Email Owner,

we were mandated by the IMF to send to you an ATM card valued (One Million Euro) to your resident address.The International Monetary Fund (IMF) is compensating all the SCAM VICTIMS and your email was found as one of the VICTIMS. We now needed your full information as to where we can dispatch your ATM card €1,000,000.00 (One Million Euro),

Note that the process have concluded and your payment files will be returned to the IMF within 72 hours if we did not hear from you, this was the instruction given to us by the IMF. We are waiting for your receiving information.

Thanks for your attention,

From DHL Office: LOT No. 23 PATTE D'OIE
Name of Dir: Mr. George Jumbo
E-mail: [email protected]
Tel: +229 97088702,

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: No registered users and 30 guests