Fake banks, couriers, law firms, escrow and other fake sites used in scams.
#175357 by Terminator5 Sat Aug 31, 2013 4:14 pm
The source IP address is 41.138.188.102

Geo-Location Information

Country Nigeria
State/Region 05
City Lagos



Begin Phishing Email:



Bailey, Katrina [email protected]


Sorry for the delay in response

An important document has been sent to you using HTML docs.

Click here to Log-in and view

Thank You!


End Phishing Email


Generic Email Address and Password Phishing Site at :


http://biancardiestudio.com/doc/docs.htm

Blackmail / Extortion / Sextortion . Anonymous Victim Assistance .
http://www.connectsafely.org/faq-on-sexting-and-sextortion/

Reporting Blackmail / Sextortion Scams and Fake Drug Purchase Blackmail Scams
https://www.ic3.gov/default.aspx
Advertisement

#175359 by Terminator5 Sat Aug 31, 2013 4:43 pm
Full Header Details:


Delivered-To: xxxxxxx
Received: by 10.194.236.74 with SMTP id us10csp23298wjc;
Sat, 31 Aug 2013 11:38:27 -0700 (PDT)
X-Received: by 10.58.119.233 with SMTP id kx9mr14308766veb.3.1377974307383;
Sat, 31 Aug 2013 11:38:27 -0700 (PDT)
Return-Path: <[email protected]>
Received: from DB8EHSNDR004.bigfish.com (mail14-db8on0066.outbound.messaging.microsoft.com. [157.55.206.66])
by mx.google.com with ESMTPS id fw17si1070207vec.104.1969.12.31.16.00.00
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sat, 31 Aug 2013 11:38:27 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 157.55.206.66 as permitted sender) client-ip=157.55.206.66;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 157.55.206.66 as permitted sender) [email protected]
Received: from db8outboundpool.messaging.microsoft.com (10.174.8.245) by
DB8EHSNDR004.bigfish.com (10.174.4.58) with Microsoft SMTP Server (TLS) id
14.1.225.23; Sat, 31 Aug 2013 18:27:37 +0000
Received: from mail217-db8-R.bigfish.com (10.174.8.225) by
DB8EHSOBE037.bigfish.com (10.174.4.100) with Microsoft SMTP Server id
14.1.225.22; Sat, 31 Aug 2013 18:27:37 +0000
Received: from mail217-db8 (localhost [127.0.0.1]) by
mail217-db8-R.bigfish.com (Postfix) with ESMTP id 4118340171; Sat, 31 Aug
2013 18:27:37 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:132.245.89.133;KIP:(null);UIP:(null);IPV:NLI;H:CO1PRD0112HT004.prod.exchangelabs.com;RD:none;EFVD:NLI
X-BigFish: PS32(z569dhzc85dhdbb0idbf2izz1f42h1d77h208ch1ee6h1de0h1fdah2073h1202h1e76h1d1ah1d2ah1fc6h1648lza7h58hz1d7338h177df4h17326ah18c673h186068h1d68deh8275bh1de097hz31h2a8h443h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1ad9h1b0ah1bceh1d07h1d0ch1d2eh1d3fh1dc1h1dfeh1dffh1e1dh1fe8h1ff5h15cm1846im)
X-FB-OUTBOUND-SPAM: yes
X-SpamScore: 32
Received-SPF: softfail (mail217-db8: transitioning domain of bears.unco.edu does not designate 132.245.89.133 as permitted sender) client-ip=132.245.89.133; [email protected]; helo=CO1PRD0112HT004.prod.exchangelabs.com ;angelabs.com ;
Received: from mail217-db8 (localhost.localdomain [127.0.0.1]) by mail217-db8
(MessageSwitch) id 1377973654680728_19901; Sat, 31 Aug 2013 18:27:34 +0000
(UTC)
Received: from DB8EHSMHS021.bigfish.com (unknown [10.174.8.251]) by
mail217-db8.bigfish.com (Postfix) with ESMTP id 5C250320031; Sat, 31 Aug 2013
18:27:34 +0000 (UTC)
Received: from CO1PRD0112HT004.prod.exchangelabs.com (132.245.89.133) by
DB8EHSMHS021.bigfish.com (10.174.4.31) with Microsoft SMTP Server (TLS) id
14.16.227.3; Sat, 31 Aug 2013 18:27:34 +0000
Received: from CO1PRD0112MB649.prod.exchangelabs.com ([169.254.5.77]) by
CO1PRD0112HT004.prod.exchangelabs.com ([10.242.170.37]) with mapi id
14.16.0353.003; Sat, 31 Aug 2013 18:27:31 +0000
From: "Bailey, Katrina" <[email protected]>
Subject: View Document
Thread-Topic: View Document
Thread-Index: Ac6md8DVqRF0yLsTTbaTIYsupXR61A==
Date: Sat, 31 Aug 2013 18:27:30 +0000
Message-ID: <[email protected]changelabs.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [41.138.188.102]Content-Type: multipart/alternative;
boundary="_000_C0C6AE73CAA24A4ABC4D70101017C7B466351543CO1PRD0112MB649_"
MIME-Version: 1.0
To: Undisclosed recipients:;
X-FOPE-CRA-Verdict: 132.245.89.133$abcwua.org%0%1%bears.unco.edu%False%False%0$
Return-Path: [email protected]
X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn%
X-FOPE-CONNECTOR: Id%0$Dn%ABCWUA.ORG$RO%1$TLS%0$FQDN%$TlsDn%
X-OriginatorOrg: bears.unco.edu

Blackmail / Extortion / Sextortion . Anonymous Victim Assistance .
http://www.connectsafely.org/faq-on-sexting-and-sextortion/

Reporting Blackmail / Sextortion Scams and Fake Drug Purchase Blackmail Scams
https://www.ic3.gov/default.aspx

Who is online

Users browsing this forum: No registered users and 13 guests