You can't win a lottery you haven't entered! Please read here for information on lottery scams.
#98324 by AlanJones Thu Apr 26, 2012 9:19 am
Emails listed here are examples of Facebook Lottery Scam emails. There is NO such thing as the Facebook Lottery, and lotteries do not randomly choose winners based on email addresses or Facebook profiles. Any email or text you have received claiming that you have won a Facebook lottery is a scam.

Please read this topic here at ScamWarners for basic information about lottery scams: viewtopic.php?f=12&t=3199



Scam email:

Reply-to: [email protected]

Facebook Company Inc.
1601 South California
Avenue Palo Alto
CA 94304
U.S.A

Dear Winner,

This is to inform you that your facebook online profile post has just WON in the
Facebook Lottery Jackpot 2011-2012,which was sponsored and organized by
Microsoft, Webmaster Inc. and Facebook Officials.
Subscribers to few Companies domains were selected and your e-mail address emerged as
one of the Selected facebook Winner and also the 5th from the 9th Beneficiary
to gain from this promotion. Below are your approved details to claim your winnings.

*********PRIZES WON**********

One Hundred And Fifty Thousand United States Dollars [$150.000.00]
One Facebook Medium Face-Cap
Facebook T-Shirt (medium, Blends with Cap)
Facebook Shopping Bag (Male Wallet)
Facebook Winning Certificate.

*********REFERENCE DETAILS***********

Online Ticket Number: 889-026-1319
Serial Number: 101-116
Facebook Winning Number: 31-U20-FB12


Type YES to process your claims.


Thanks:


Mrs.Linda Seifert
Facebook Supervisor 2012.

All right reserved facebook terms.

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
Advertisement

#155400 by Mike Wilson Sun Mar 10, 2013 11:04 am
www.facebookpowerlottery.us

Fake lottery Facebook Promo

Phone: (734) 238-3159

Email: [email protected]





The website is in the process of being reported for fraud.

It is ALWAYS a scam
If the pet seller or shipper asks for money to be sent via Western Union, Money Gram, any brand of gift card. Walmart To Walmart , Zelle or mentions Cameroon

mikeawilsons @ gmail.com
#174852 by Faizan Docherty Sat Aug 24, 2013 11:21 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 212.82.98.97
Originating ISP: Yahoo! Europe
City: n/a
Country of Origin: United Kingdom
* For a complete report on this email header goto ipTRACKERonline


X-Apparently-To: <snipped> via 98.138.85.201; Thu, 22 Aug 2013 13:18:19 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: <snipped>
X-Originating-IP: [77.238.189.71]
Authentication-Results: mta1074.mail.bf1.yahoo.com from=yahoo.co.uk; domainkeys=pass (ok); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm18.bullet.mail.ird.yahoo.com) (77.238.189.71)
by mta1074.mail.bf1.yahoo.com with SMTP; Thu, 22 Aug 2013 11:31:39 -0700
Received: from [77.238.189.53] by nm18.bullet.mail.ird.yahoo.com with NNFMP; 22 Aug 2013 18:28:17 -0000
Received: from [212.82.98.97] by tm6.bullet.mail.ird.yahoo.com with NNFMP; 22 Aug 2013 18:28:17 -0000
Received: from [127.0.0.1] by omp1034.mail.ir2.yahoo.com with NNFMP; 22 Aug 2013 18:28:17 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 52448 invoked by uid 0); 22 Aug 2013 18:28:17 -0000
DKIM-Signature: <snipped>
DomainKey-Signature:<snipped>;
Message-ID: <[email protected]>
Date: Thu, 22 Aug 2013 19:28:16 +0100 (BST)
From: Mr David Ebersman <[email protected]>
Subject: Auto-response
To: <snipped>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Length: 205


Your mail has been received and will be processed shortly. Contact this office through this mobile number +447012987065

Regards
Mr. David Ebersman
Chief Financial Officer
Facebook International Lottery.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#175957 by Faizan Docherty Sat Sep 07, 2013 11:49 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 95.60.140.150<br>Originating ISP: Vodafone Spain<br> City: Gerena<br>Country of Origin: Spain<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.221.48.135 with SMTP id uw7csp264109vcb;
Thu, 5 Sep 2013 06:27:40 -0700 (PDT)
X-Received: by 10.66.255.10 with SMTP id am10mr9261885pad.165.1378387659824;
Thu, 05 Sep 2013 06:27:39 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mxwall.nissan.com.ph (mail.nissan.com.ph. [202.57.38.115])
by mx.google.com with ESMTP id hb3si23776284pac.210.1969.12.31.16.00.00;
Thu, 05 Sep 2013 06:27:39 -0700 (PDT)
Received-SPF: neutral (google.com: 202.57.38.115 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=202.57.38.115;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 202.57.38.115 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from localhost (localhost [127.0.0.1])
by mxwall.nissan.com.ph (Postfix) with ESMTP id B32C23352A;
Thu, 5 Sep 2013 21:27:34 +0800 (PHT)
X-Virus-Scanned: amavisd-new at nissan.com.ph
Received: from mxwall.nissan.com.ph ([127.0.0.1])
by localhost (mxwall.nissan.com.ph [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id ur_eQ3InWM_w; Thu, 5 Sep 2013 21:27:27 +0800 (PHT)
Received: from NMPI_3.nissan.com.ph (NMPI_3.nissan.com.ph [10.5.0.52])
by mxwall.nissan.com.ph (Postfix) with ESMTP id 5F40B33513;
Thu, 5 Sep 2013 21:27:27 +0800 (PHT)
Received: from User (95.60.140.150 [95.60.140.150]) by NMPI_3.nissan.com.ph with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2655.55)
id S2T0X2MW; Thu, 5 Sep 2013 21:27:21 +0800
Reply-To: <fac[email protected]>
From: "FACEBOOK"<[email protected]>
Subject: Facebook Congratulates you!!
Date: Thu, 5 Sep 2013 15:27:20 +0200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;


Facebook Online International Lottery
From: The Desk Of the President.
International Promotions / Prize Award.
Category: 3rd


Greetings to you Dear lucky winner. We are pleased to inform you of the result of the just concluded annual final draws held on the 4th of July 2013 (The Independence Day) by Facebook group in cash promotion to encourage the usage of Facebook worldwide, Your name was among the 20 lucky winners who won $950.000.00USD (Nine hundred and Fifty Thousand United State dollars) each on the Facebook group promotion award attached to Lucky Number (23456895410), Ticket Number (5647600545189), Batch Number (2551236002/244) and Serial Number (55643451907).


The online draws was conducted by a random selection of emails you were picked by an advanced automated random computer search from the Facebook in other to claim your $950.000.00usd the lottery program which is a new innovation by Facebook, is aimed at saying a big thank you to all our users for making Facebook their number one means to connect, communicate, relate and hook up with their families and friends over the years.


This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants and scam artists all participants were selected through a computer ballot system drawn from over 20,000 companies and 30,000,000 individuals email addresses from all over the world. This promotional program takes place every three years. You have to be rest assured that this is real and legal there are some scam artists around thanks to the FBI 216 of them have been arrested.


You are required to contact the head of our disbursement department in the person of Mr.David Wright via this email ([email protected]) with information below for the complete processing of your Winning certificate and further information regarding the disbursement of your lottery winnings.


Full Name:
Contact Address:
Mobile Number:
Occupation:
Marital Status:
Sex:
Age:
Country of Residence:
Nationality:
Lucky Number:
Ticket Number:
Batch Number:
Serial Number:
Your Email Address:


Furthermore, if there is any change in email addresses please contact us on time. Do not reply to this email, Contact the disbursement department with the email provided above.


Note: if you are not interested please do not bother to reply.


Thanks and more Congratulations!


Regards,
Mr. Ron Jones
Announcer/Promo Coordinator.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#183251 by Faizan Docherty Thu Dec 05, 2013 1:40 am
Emails listed here are examples of Facebook Lottery Scam emails. There is NO such thing as the Facebook Lottery, and lotteries do not randomly choose winners based on email addresses or Facebook profiles. Any email or text you have received claiming that you have won a Facebook lottery is a scam.

Please read this topic here at ScamWarners for basic information about lottery scams: viewtopic.php?f=12&t=3199

Here is the latest scam email:


ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 65.55.90.135<br>Originating ISP: Microsoft Hosting<br> City: Redmond<br>Country of Origin: United States<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.4.133 with SMTP id k5csp312012pdk;
Wed, 4 Dec 2013 13:56:37 -0800 (PST)
X-Received: by 10.50.25.227 with SMTP id f3mr3052778igg.16.1386194197241;
Wed, 04 Dec 2013 13:56:37 -0800 (PST)
Return-Path: <[email protected]>
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com. [184.154.1.124])
by mx.google.com with ESMTPS id w9si15273iga.3.2013.12.04.13.56.36
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Wed, 04 Dec 2013 13:56:37 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 184.154.1.124 as permitted sender) client-ip=184.154.1.124;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 184.154.1.124 as permitted sender) [email protected]
Received: from snt0-omc3-s30.snt0.hotmail.com ([65.55.90.169]:16042)
by r8-chicago.webserversystems.com with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1VoKQt-000CTr-0T
for <snipped>; Wed, 04 Dec 2013 15:56:35 -0600
Received: from SNT150-W2 ([65.55.90.135]) by snt0-omc3-s30.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 4 Dec 2013 13:56:34 -0800
X-TMN: [f4yovXcXhxkREKRC5fhqZRFLWO/H5VAh]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="_de5e6034-ec70-4f79-9316-ccba1e4631f6_"
From: FACEBOOK LOTTERY OFFICIALS <[email protected]>
To: "[email protected]"
<[email protected]>,
"[email protected]" <[email protected]>,
"[email protected]" <[email protected]>, "."
<snipped>
Date: Wed, 4 Dec 2013 21:56:34 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 04 Dec 2013 21:56:34.0259 (UTC) FILETIME=[B2A11A30:01CEF13B]
X-Spam-Status: Yes, score=5.6
X-Spam-Score: 56
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: CONGRATULATIONS FROM FACEBOOK! FACEBOOK THE LARGEST SOCIAL
NETWORKING SITE VALUED MORE THAN $100 BILLION DOLLARS AND ALSO EXPECTING
ITS ONE BILLION USERS TO COME MAINLY FROM MOBILE DEVICES THAN DESKTOP USERS
BY 2013, [...]

Content analysis details: (5.6 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.6 BILLION_DOLLARS BODY: Talks about lots of money
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(facebook110[at]live.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (facebook110[at]live.com)
1.4 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5018]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Flag: YES
Subject: ***SPAM*** CONGRATULATIONS FROM FACEBOOK!
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - r8-chicago.webserversystems.com
X-AntiAbuse: Original Domain - <snipped>
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - live.com
X-Get-Message-Sender-Via: r8-chicago.webserversystems.com: none
X-Source:
X-Source-Args:
X-Source-Dir:


CONGRATULATIONS FROM FACEBOOK!


FACEBOOK THE LARGEST SOCIAL NETWORKING SITE VALUED MORE THAN $100 BILLION DOLLARS AND ALSO EXPECTING ITS ONE BILLION USERS TO COME MAINLY FROM MOBILE DEVICES THAN DESKTOP USERS BY 2013,



FACEBOOK FOUNDER MARK ZUCKERBERG HAS DECIDED TO BOOST USERS AND COMPANIES A WINDOW OF OPPORTUNITY BY LOTTERY PROGRAM AND INITIAL PUBLIC OFFER SAID IN A PRESS RELEASE.



SO WE ARE PLEASED TO INFORM YOU OF THE RESULT OF THE END OF THE YEAR DRAW HELD ON (1ST DECEMBER 2013) BY FACEBOOK COMPANY IN CASH PROMOTION TO ENCOURAGE THE USAGE OF FACEBOOK USERS WORLD WIDE,





YOUR NAME AND EMAIL WAS AMONG THE 30 LUCKY WINNERS WHO WON $300,000:00 USD (THREE HUNDRED THOUSAND UNITED STATE

DOLLARS) EACH ON THE FACE BOOK PROMOTION AWARD ATTACHED TO TICKET NUMBER (564760545189),





IF YOU ARE NOT INTERESTED PLEASE DO NOT BOTHER TO REPLY AND CONGRATULATION ONCE AGAIN FROM FACEBOOK!


Thanks,
FACEBOOK

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#183671 by Faizan Docherty Sun Dec 08, 2013 11:48 am
Emails listed here are examples of FACEBOOK Lottery Scam emails. There is NO such thing as the FACEBOOK Lottery, and lotteries do not randomly choose winners based on email addresses. Any email or text you have received claiming that you have won a FACEBOOK lottery is a scam.

Please read this topic here at ScamWarners for basic information about lottery scams:

viewtopic.php?f=12&t=3199


Here is the latest scam email:


ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 93.178.240.32<br>Originating ISP: Private Joint-stock Company Farlep-invest<br> City: Lviv<br>Country of Origin: Ukraine<br>* For a complete report on this email header goto ipTRACKERonline


From MR. RICHARD BROWN Sun Dec 8 07:12:23 2013
X-Apparently-To: <snipped> via 72.30.239.32; Sun, 08 Dec 2013 15:12:35 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 195.248.191.95
Received-SPF: none (domain of noreply.com does not designate permitted sender hosts)
X-YMailISG: <snipped>
X-Originating-IP: [195.248.191.95]
Authentication-Results: mta1544.mail.ne1.yahoo.com from=noreply.com; domainkeys=neutral (no sig); from=noreply.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.alkar.net) (195.248.191.95)
by mta1544.mail.ne1.yahoo.com with SMTP; Sun, 08 Dec 2013 15:12:35 +0000
Received: from [93.178.240.32] (HELO User)
by mail.alkar.net (CommuniGate Pro SMTP 5.2.20)
with SMTP id 776957423; Sun, 08 Dec 2013 17:12:24 +0200
Reply-To: <[email protected]>
From: "MR. RICHARD BROWN"<[email protected]>
Subject: ADEQUATE ATTENTION FROM FACEBOOK CHRISTMAS PROMO.
Date: Sun, 8 Dec 2013 07:12:23 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
Content-Length: 2480


FACEBOOK NOTIFICATION.

We are pleased to inform you that you have be selected to receive the sum of $950.000.00USD (Nine Hundred And Fifty Thousand United State Dollars) in the annual Final draw held by FaceBook INC group to promote the use of FaceBook, and to say a big thank you to all our users for making FaceBook their number one means to connect, communicate, relate and hook up with their families and friends over the years.

The lottery draw where Conducted by a random selection of email and your email where picked by an Advanced automated random computer search from the FaceBook and the web.

To claim your winning you will be required to send the following information immediately.

FULL NAME:
FULL CONTACT ADDRESS:
MOBILE PHONE NUMBER:
OCCUPATION AND AGE:

Upon receipt of the above details from you, our Lotto team will proceed with the immediate settlement of your winning for it subsequent release to you accordingly. Please to avoid unwarranted abuse of this program by some participants. You are advised to keep your winning details confidential until your claims have been fully processed and your money remitted to you. As this is a security protocol to avoid multiple claims.

Your winning tag is FB002013A, keep it confidential as this is your settlement file number without it your winning cannot be process and if it fall into wrong hand they can use it to claim your winning, also remember to quota it when your write.

Yours Sincerely

Mr. Erskine B. Bowles
The Face Book Lottery Announcer.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#188388 by Faizan Docherty Wed Jan 22, 2014 3:11 am
Emails listed here are examples of FACEBOOK Lottery Scam emails. There is NO such thing as the FACEBOOK Lottery, and lotteries do not randomly choose winners based on email addresses. Any email or text you have received claiming that you have won a FACEBOOK lottery is a scam.

Please read this topic here at ScamWarners for basic information about lottery scams: viewtopic.php?f=12&t=3199

Here is the latest scam email:

Delivered-To: <snipped>
Received: by 10.227.64.201 with SMTP id f9csp183533wbi;
Mon, 20 Jan 2014 17:42:24 -0800 (PST)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.68.164.131 as permitted sender) client-ip=10.68.164.131
Authentication-Results: mr.google.com;
spf=pass (google.com: domain of [email protected] designates 10.68.164.131 as permitted sender) [email protected];
dkim=pass [email protected]
X-Received: from mr.google.com ([10.68.164.131])
by 10.68.164.131 with SMTP id yq3mr26824621pbb.56.1390268544516 (num_hops = 1);
Mon, 20 Jan 2014 17:42:24 -0800 (PST)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.68.164.131 with SMTP id yq3mr21925891pbb.56.1390268543948;
Mon, 20 Jan 2014 17:42:23 -0800 (PST)
Received: by 10.68.227.165 with HTTP; Mon, 20 Jan 2014 17:42:23 -0800 (PST)
Date: Mon, 20 Jan 2014 18:42:23 -0700
Message-ID: <[email protected]om>
Subject: CONGRATULATIONS FROM FACEBOOK!
From: Facebook Lotto <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=047d7b3a9b8eb45ef104f0711eae
Bcc: <snipped>


CONGRATULATIONS FROM FACEBOOK!

Facebook the largest Social Networking site valued more than $100 Billion Dollars and also expecting its One Billion Users to come mainly from Mobile devices than desktop Users by 2013, Facebook founder Mark Zuckerberg has decided to boost Users and Companies a WINDOW OF OPPORTUNITY by Lottery Program and Initial Public Offer said in a press release.

So We are pleased to inform you of the result of the NEW YEAR DRAW held on (17th January 2014) by Facebook Company in cash Promotion to encourage the usage of Facebook users world wide, your Name and Email was among the 50 Lucky winners who won $300,000:00 USD (Three Hundred Thousand United State
Dollars) each on the Face book promotion Award Attached to Ticket Number (5647600545189), Ref No (2551256002/244) and Serial Number (55643451907).

The online draw was Conducted by a random selection of email you where picked by an Advanced automated random computer search from the Facebook in other to claim your $300.000.00 USD the lottery program which is a new innovation by Facebook, His aimed at saying A BIG THANK to you all our users for making Facebook your number one Social Networking to hook up with their families and friends all over the World.

This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants and Scam artists All participants were selected through a computer ballot system with their email addresses and names from all over the world.

Thanks to the FBI and the Software Company corporation to block few individuals web site and email addresses.

Your name and email was selected in a raffle draw that was made 17th of January 2014 so we need your fast response so that we can proceed with the delivery of your fund.

You are required to contact our dispatch dept via email ([email protected], Contact Name:Patrick Widen) in order for us to complete your Winning Certificate and for further information regarding the disbursement of your lottery win.

To avoid unnecessary delays and complications please remember to quote your Ticket, Reference and Batch Numbers in all correspondences.
Furthermore, if there is any change in email address please contact us on time.

If you are not interested please do not bother to reply and CONGRATULATIONS ONCE AGAIN FROM FACEBOOK!

Thanks,
Erskine Bowles.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#215824 by Bryon Williams Fri Aug 22, 2014 10:11 pm
From: [email protected]
Reply-To: [email protected]

Website: www.facebook.com
Facebook Online International Lottery

We are pleased to inform you that your name was among the 5 lucky winners who won $250,000.00 (Two Hundred and Fifty United State Dollars) each in the ongoing Facebook Online International Lottery, to claim and for more information please send your Name, Address, Occupation and Mobile Number to David Alfredo via this E-mail address ([email protected]).

Thanks and more Congratulations!

Regards
Sheryl Kara Sandberg

Please contact Mike Wilson if you have a question or information about this post.

mike-wilson @ scawarners.com

Please do not tell the scammer he is posted here.


Please remember the fallen. https://www.odmp.org/
#216266 by Faizan Docherty Mon Aug 25, 2014 11:04 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 108.166.64.15
Originating ISP: Slicehost
City: San Antonio
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.221.18.133 with SMTP id qg5csp53044vcb;
Sun, 24 Aug 2014 15:03:15 -0700 (PDT)
X-Received: by 10.180.77.83 with SMTP id q19mr1449405wiw.83.1408917794935;
Sun, 24 Aug 2014 15:03:14 -0700 (PDT)
Return-Path: <[email protected]island.gr>
Received: from server01.takeitover.nl (server01.takeitover.nl. [89.105.203.82])
by mx.google.com with ESMTP id s1si7551896wif.8.2014.08.24.15.03.12
for <multiple recipients>;
Sun, 24 Aug 2014 15:03:14 -0700 (PDT)
Received-SPF: none (google.com: [email protected] ... misland.gr does not designate permitted sender hosts) client-ip=89.105.203.82;
Authentication-Results: mx.google.com;
spf=neutral (google.com: [email protected] ... misland.gr does not designate permitted sender hosts) [email protected] ... misland.gr
Message-Id: <[email protected]>
Received: from User (unknown [108.166.64.15])
by server01.takeitover.nl (Postfix) with ESMTPA id 909587D190;
Mon, 25 Aug 2014 00:01:57 +0200 (CEST)
From: "Facebook"<[email protected]island.gr>
Subject: Facebook Security: Confirm Protection FB-4671200054190 Code
Date: Sun, 24 Aug 2014 23:02:43 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0112_01C2A9A6.6164B22C"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is a multi-part message in MIME format.

------=_NextPart_000_0112_01C2A9A6.6164B22C
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit


Your Account Reward & Sign-in Protection


Your account have been Rewarded with a Facebook Coupon Voucher with the Summary Below:

Facebook Reward COUPON PIN Voucher Code: FB-46712********
Reward Units is: 988.54 Units = 340.55 USD
Location: Europe

Dear Facebook User,

Please note that your Reward Coupon Voucher is not fully displayed above for secrity reasons. Your Facebook Account attracts a Coupon of 988.54 Units.
To redeem this in cash. Kindly note the following:

1. This will take maximum of 1 Working Day to be available as Cash from the time of process
2. The equivalence of your Reward Units is: 988.54 Units = 340.55 USD
3. Invalid or incorrect inputs of your Billing information or Invalid coupon Code may cause delay in instant processing
4. Facebook will never ask you for Passcode, ATM Pin or Online Banking access.
5. Your Financial institution policy may cause your processing to be delayed for more than 1 working Day

Please note that your inputs and all data are not stored by Facebook and Facebook will not keep any of your financial information or record.

Your Complete COUPON PIN Code: (FB-4671200054190)

Proceed from the Secured Attached file.


The attached file is not posted. It is just a phishing file that hopes you fill in all of your sensitive personal and financial data. If you receive this email and it has an attachment for you to fill out, DO NOT FILL IT OUT!!!

This is the information they want you to provide:


Redeem Your Facebook Coupon In 1 Working Day

Invalid or incorrect inputs of your Billing information or Invalid coupon Code
may cause delay in instant processing.

Email or Phone
City/State
Full Name
House Number
Street Name
Biling Address
Coupon Code
Date of Birth
Mothers Maiden
Credit/Debit Card Number
Expiry Date
3 Digits on Back of Card
Postal Code
Email Address
Email Password


Just think of what a scammer could do with that information! Don't give it to them!!!

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#216274 by Faizan Docherty Mon Aug 25, 2014 11:25 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 93.54.64.178
Originating ISP: Fastweb
City: Turin
Country of Origin: Italy
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.221.18.133 with SMTP id qg5csp66519vcb;
Sun, 24 Aug 2014 22:49:19 -0700 (PDT)
X-Received: by 10.112.235.199 with SMTP id uo7mr18302545lbc.50.1408945759023;
Sun, 24 Aug 2014 22:49:19 -0700 (PDT)
Return-Path: <[email protected]>
Received: from outrelay05.libero.it (outrelay05.libero.it. [212.52.84.106])
by mx.google.com with ESMTP id l5si10072402lbs.15.2014.08.24.22.49.18
for <multiple recipients>;
Sun, 24 Aug 2014 22:49:19 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 212.52.84.106 as permitted sender) client-ip=212.52.84.106;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 212.52.84.106 as permitted sender) [email protected];
dkim=fail [email protected]
Message-ID: <[email protected]>
X-Google-Original-Message-ID: <[email protected]> (added by [email protected])
X-CTCH-Spam: Bulk
X-CTCH-RefID: str=0001.0A0C0204.53FACDDD.0094,ss=3,sh,re=0.000,fgs=16
X-libjamoibt: 1933
Received: from outrelay06.libero.it (192.168.34.15) by outrelay05.libero.it (8.5.140.03)
id 53D22AAC036D1213; Mon, 25 Aug 2014 07:49:18 +0200
DKIM-Signature: <snipped>
X-CTCH-Spam: Bulk
X-CTCH-RefID: str=0001.0A0C0209.53FACE58.00C6,ss=3,re=0.000,fgs=16
X-libjamoibt: 1823
Received: from User (93.54.64.178) by outrelay06.libero.it (8.6.033) (authenticated as [email protected])
id 53F1B4A20287694E; Mon, 25 Aug 2014 07:49:12 +0200
Reply-To: <[email protected]>
From: "HOTEL CANADA"<[email protected]>
Subject: [b]Facebook Charity Award Office[/b]
Date: Mon, 25 Aug 2014 11:19:03 +0530
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000


Facebook Charity Award Office,
22 Ganton Street,
London, W1F 7BY
United Kingdom
Email:[email protected]
Website: http://www.facebook.com
Tel: (+ 44) - 701 - 424 - 3157
FAX NO+44)- 870-080-1801


Dear Winner;

YOU HAVE WON Ј500,000GBP IN FACEBOOK.® 10ANNIVERSARY LOTTERY AWARD (UK) PROMOTION IN THE UNITED KINGDOM.TO CLAIM YOUR WINNING PRIZE YOU HAVE TO FILL THE CLAIM APPLICATION FORM BELOW AND SEND IT BACK TO US FOR PROCESSING.

WINNING CLAIMS APPLICATION FORM:

YOUR FULL NAME:..........
HOME ADDRESS:............
COUNTRY:.................
OCCUPATION:..............
SEX:.....................
AGE:.....................
CONTACT MOBILE NO:.......
YOUR EMAIL ADDRESS:......

YOU ARE ADVISED TO FILL UP YOUR FULL INFORMATION IN THE ABOVE FORM AND SEND IT TO US VIA OUR EMAIL ADDRESS: [email protected]

CONGRATULATIONS
THANKS
DR. JUSTICE

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#224227 by Faizan Docherty Wed Oct 22, 2014 3:30 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.220.69.18
Originating ISP: Vgc Communication
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.125.234 with SMTP id mt10csp62882pdb;
Wed, 22 Oct 2014 04:35:54 -0700 (PDT)
X-Received: by 10.66.160.193 with SMTP id xm1mr22394669pab.115.1413977754196;
Wed, 22 Oct 2014 04:35:54 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (aso-006-i427.relay.mailchannels.net. [174.136.13.73])
by mx.google.com with ESMTP id gl5si13853414pbc.229.2014.10.22.04.35.52
for <snipped>;
Wed, 22 Oct 2014 04:35:53 -0700 (PDT)
Received-SPF: fail (google.com: domain of [email protected] does not designate 174.136.13.73 as permitted sender) client-ip=174.136.13.73;
Authentication-Results: mx.google.com;
spf=hardfail (google.com: domain of [email protected] does not designate 174.136.13.73 as permitted sender) [email protected]
X-Sender-Id: _forwarded-from|hyrdelova
Received: from r8-chicago.webserversystems.com (ip-10-33-12-218.us-west-2.compute.internal [10.33.12.218])
by relay.mailchannels.net (Postfix) with ESMTPA id 1C5C960A71
for <snipped>; Wed, 22 Oct 2014 11:35:50 +0000 (UTC)
X-Sender-Id: _forwarded-from|hyrdelova
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.248.11.136])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.3.1);
Wed, 22 Oct 2014 11:35:51 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|hyrdelova
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1413977751232:2829239671
X-MC-Ingress-Time: 1413977750294
Received: from http://www.mfn.sk ([80.242.32.60]:13668 helo=mfn.sk)
by r8-chicago.webserversystems.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1XguCg-0005ul-ME
for <snipped>; Wed, 22 Oct 2014 06:35:47 -0500
Received: from mail.mfn.sk (localhost [127.0.0.1])
by mfn.sk (Microsoft Windows2003 MailServer) with ESMTP id 54DAE8AA94;
Wed, 22 Oct 2014 12:59:22 +0200 (CEST)
X-Virus-Scanned: amavisd-new at unm.sk
Received: from mfn.sk ([127.0.0.1])
by mail.mfn.sk (mail.mfn.sk [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id MeEuAXgyJkwk; Wed, 22 Oct 2014 12:59:21 +0200 (CEST)
Received: by mfn.sk (Microsoft Windows2003 MailServer, from userid 80)
id 8E3E88A6B3; Wed, 22 Oct 2014 12:51:56 +0200 (CEST)
Received: from 41.220.69.18
(SquirrelMail authenticated user hyrdelova)
by webmail.unm.sk with HTTP;
Wed, 22 Oct 2014 12:51:56 +0200
Message-ID: <[email protected]>
Date: Wed, 22 Oct 2014 12:51:56 +0200
Subject: www.facebook.com Congratulations,
From: "Facebook Rewards Program" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.5.2 [SVN]
MIME-Version: 1.0
Content-Type: text/plain;charset=utf-8
X-Spam-Status: No, score=2.9
X-Spam-Score: 29
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: http://www.facebook.com Congratulations, your facebook account have
been randomly selected as a beneficiary of $1,000,000.00usd in the 2013 Facebook
Account of the Year {Grand Rewards winner}. Email us the below details:[email protected]
1) facebook username: 2) Present Country of Residence: 3) Amount Won: $1,000,000.00
usd [...]

Content analysis details: (2.9 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
-1.4 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
X-Spam-Flag: NO
X-MC-Forward: <snipped>
X-AuthUser:
Content-Transfer-Encoding: quoted-printable


www.facebook.com
Congratulations,

your facebook account have been randomly selected as a beneficiary of
$1,000,000.00usd in the 2013 Facebook Account of the Year
{Grand Rewards winner}.

Email us the below details: [email protected]
1) facebook username:
2) Present Country of Residence:
3) Amount Won: $1,000,000.00 usd


Eduardo Saverin
Program Coordinator,
Facebook Rewards Program,
+1-209-315-5906
http://www.facebook.com
All rights reserved 2014.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#229373 by Faizan Docherty Wed Dec 03, 2014 10:15 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 212.82.98.119
Originating ISP: Yahoo! Europe
City: n/a
Country of Origin: United Kingdom
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.145.137 with SMTP id t131csp503712lfd;
Tue, 2 Dec 2014 11:42:14 -0800 (PST)
X-Received: by 10.180.211.201 with SMTP id ne9mr7658220wic.30.1417549334409;
Tue, 02 Dec 2014 11:42:14 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm9-vm4.bullet.mail.ir2.yahoo.com (nm9-vm4.bullet.mail.ir2.yahoo.com. [212.82.96.147])
by mx.google.com with ESMTPS id l6si37572279wic.97.2014.12.02.11.42.11
for <snipped>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Tue, 02 Dec 2014 11:42:14 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=212.82.96.147;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected];
dkim=pass [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>;
Received: from [212.82.98.52] by nm9.bullet.mail.ir2.yahoo.com with NNFMP; 02 Dec 2014 19:42:04 -0000
Received: from [212.82.98.99] by tm5.bullet.mail.ir2.yahoo.com with NNFMP; 02 Dec 2014 19:42:04 -0000
Received: from [127.0.0.1] by omp1036.mail.ir2.yahoo.com with NNFMP; 02 Dec 2014 19:42:04 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: by 212.82.98.119; Tue, 02 Dec 2014 19:42:03 +0000
Date: Tue, 2 Dec 2014 19:42:02 +0000 (UTC)
From: MR JOHN BRUMA <[email protected]>
Reply-To: MR JOHN BRUMA <[email protected]>
Message-ID: <[email protected].yahoo.com>
Subject: CONGRATULATIONS FROM FACE BOOK!
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_4533793_1981411790.1417549322695"
Content-Length: 6720


FACE BOOK ONLINE LOTTERY PROGRAM 2014
FROM: THE DESK OF THE PRESIDENT.
INTERNATIONAL PROMOTIONS/PRIZE AWARD.
BATCH NUMBER: 2551236002/244
SERIAL NUMBER. 55643451907
TICKET NUMBER: 5647600545189
CATEGORY: 2ND

CONGRATULATIONS FROM FACE BOOK!

We are pleased to inform you of the result of the just concluded annual Final draws held on the (27th of October 2014) by Face book group in cash Promotion to encourage the usage of Face book world wide, your name was among the 20 Lucky winners who won $600.000.00USD (six hundred thousand united state dollars) each on the Face book ground promotion Award Attached to ticket number (5647600545189) and Ref No (2551256002/244) Serial Number (55643451907).

The online draws was Conducted by a random selection of email you where picked by an Advanced automated random computer search from the Face book in other To claim your $600.000.00USD the lottery program which is a new innovation by Face book, is aimed at saying A BIG THANK YOU to all our users for making Face book their number one means to connect, communicate,relate and hook up with their families and friends over the years.

This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants and Scam artists All participants were selected through a computer ballot system drawn from over 20,000 companies' and 30,000,000 individuals' email addresses and names from all over the world. This promotional program takes place every three years.You have to be Rest assured that this is Real and Legal..and there are Some Scam artists around...Thanks to the FBI...216 of them have been arrested... The software corporation to encourage some few individuals with web site and email addresses promoted this lottery.

Your name was selected in a raffle that was made on (27th of October 2014) so we need your fast response so that we can proceed with the delivery of your fund.

You are required to get back to us with this required information below to enable you claim your winnings :

FULL NAME:
FULL CONTACT ADDRESS:
MOBILE PHONE NUMBER:
OCCUPATION:
MARITAL STATUS AND AGE:
NATIONALITY / COUNTRY:
TICKET NUMBER:
REF NUMBER:
SERIAL NUMBER:
YOUR EMAIL ADDRESS:

All winnings must be claimed not later than (23td of November 2014). After this date all unclaimed funds will be included in the next stake. To avoid unnecessary delays and complications please remember to quote your reference and batch numbers in all correspondences. Furthermore, if there is any change in email address please contact us on time.

To enable him issue you certificate of winning

Accept my heart congratulations once again,

CONGRATULATIONS ONCE AGAIN FROM FACE BOOK!

Thanks,
Regards,
Patrick Widen
Promo Coordinator.
APPROVED AND SIGNED
BY MR JOHN BRUMA CEO FACEBOOK TEAM.
[email protected]

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#233007 by Faizan Docherty Sun Jan 04, 2015 7:43 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 196.46.246.10
Originating ISP: Celtel Nigeria Limited T.a Zain
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.211.135 with SMTP id k129csp3112462lfg;
Fri, 2 Jan 2015 19:26:17 -0800 (PST)
X-Received: by 10.194.189.138 with SMTP id gi10mr160281738wjc.86.1420255577667;
Fri, 02 Jan 2015 19:26:17 -0800 (PST)
Return-Path: <[email protected]>
Received: from dell1850-01.COAAT-SE.ES (62.81.207.38.static.user.ono.com. [62.81.207.38])
by mx.google.com with ESMTP id kn5si98798646wjb.116.2015.01.02.19.26.16;
Fri, 02 Jan 2015 19:26:17 -0800 (PST)
Received-SPF: fail (google.com: domain of [email protected] does not designate 62.81.207.38 as permitted sender) client-ip=62.81.207.38;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of [email protected] does not designate 62.81.207.38 as permitted sender) [email protected]
Received: from User ([196.46.246.10] unverified) by dell1850-01.COAAT-SE.ES with Microsoft SMTPSVC(5.0.2195.7381);
Sat, 3 Jan 2015 04:29:22 +0100
Reply-To: <[email protected]>
From: "Mr.Marc Andreessen"<[email protected]>
Subject: Confirmation Lette
Date: Sat, 3 Jan 2015 16:28:23 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 150102-1, 01/02/2015), Outbound message
X-Antivirus-Status: Clean
Bcc:
Return-Path: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 03 Jan 2015 03:29:23.0304 (UTC) FILETIME=[77DD0E80:01D02705]


FACEBOOK LOTTERY PROMOTION !!!
(Founder and CEO Mark Zuckerberg)
European Region Office:
10B Widemarsh Street
Hereford Square,
London HP1 8HFD,
England.

We happily announce to you the draw of the Facebook Lottery Promotions
for the year 2014, at our Lotto Draw Headquarters London, United
Kingdom organized by Facebook on which your E-mail address has emerge
as one of the newly introduced Digital Lottery Programme winner which
involves the use of email addresses. Facebook Lottery is held every
9th, 19th, and 29th of every month. Your e-mail address won
$5,000,000.00 in the 2nd category and in this category (5) E-mail
address came out as winners and your E-mail is one of them.

YOUR WINNING NOTIFICATION:
Ticket number: 00545 188 564756,
Prize #77801209/N,
WINNING NUMBER: FB/575061725.
Serial number 5368/02
Lucky numbers: 17 98 09 67 46

You have been approved to claim a total sum of $5,000,000.00 (Five
Million United States Dollars).
This is from a total cash prize of $25,000,000.00 (Twenty Five Million
United States Dollars) shared amongst the (5) lucky winners in every
category.

Prize Claim Inquiries:
Fill in this space below and send it to (C.S.I.H Department)
immediately to facilitate your claims as our beneficiary:

FULL NAME:,,,,,,,,,,
HOME ADDRESS,,,,,,,,,,
RESIDENTIAL,,,,,,,,,,,,
NATIONALITY:,,,,,,,,,,,,,,
OCCUPATION :,,,,,,,,,
TELEPHONE :,,,,,,,,,
RELIGION :,,,,,,,,,,,
EMAIL :,,,,,,,,,,,
AGE :,,,,,,,,,,,,
SEX :,,,,,,,,,,

Note: Any prize not claimed within this period (21 days) from now will
be forfeited.
For security reasons, we advice all winners to keep this information
confidential from the public notice until your claims is processed and
released to you. This is part of our security protocol to avoid double
claiming and unwarranted taking advantage of this program by
non-participant or unofficial personnel.

If you have questions or wish to claim your prize money kindly contact
Mr. David M. Wehner Chief Financial Officer At....,
E-mails: [email protected]
Mobile:+44-7011148163

Yours in service,
Mr.Marc Andreessen
Facebook Lottery Facilitator.

Copyright ©2015 Facebook Lottery Promotions!

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#234459 by Faizan Docherty Fri Jan 16, 2015 3:54 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 213.181.206.95
Originating ISP: Business Telecom Tavkozlesi Nyilvanosan Mukodo Res
City: Fót
Country of Origin: Hungary
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.211.135 with SMTP id k129csp166930lfg;
Thu, 15 Jan 2015 18:53:09 -0800 (PST)
X-Received: by 10.180.73.206 with SMTP id n14mr1762188wiv.60.1421376789520;
Thu, 15 Jan 2015 18:53:09 -0800 (PST)
Return-Path: <[email protected]>
Received: from mx-gw-95.businesstelecom.hu (mx-gw-95.businesstelecom.hu. [213.181.206.95])
by mx.google.com with ESMTP id uq6si6106979wjc.12.2015.01.15.18.52.50;
Thu, 15 Jan 2015 18:53:09 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=213.181.206.95;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected]nesstel.hu does not designate permitted sender hosts) [email protected]
Received: from ns1.businesstelecom.hu (unknown [10.255.1.3])
by mx-gw-95.businesstelecom.hu (Postfix) with ESMTP id E96DC247B;
Fri, 16 Jan 2015 03:52:42 +0100 (CET)
Received: from webmail.btel.hu (unknown [10.255.1.18])
(Authenticated sender: [email protected])
by ns1.businesstelecom.hu (Postfix) with ESMTPA id 31DAB40C49;
Fri, 16 Jan 2015 03:52:39 +0100 (CET)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 8bit
Date: Fri, 16 Jan 2015 02:51:44 +0000
From: facebook <[email protected]>
To: undisclosed-recipients:;
Subject: www.facebook.com Gratulerer,
Organization: facebook lottery
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Return-Receipt-To: facebook <[email protected]>
Disposition-Notification-To: facebook <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.9.2


--
http://www.facebook.com
Gratulerer,

Som vi feire vår 10år av internett Journey og Global Communication vi er glad for å kunngjøre for deg at din facebook-konto har blitt tilfeldig valgt som mottaker av $ 1,000,000.00usd i 2014 Facebook-konto of the Year {av Grand belønner vinneren}.

Send e-post nedenfor detaljer:
[email protected]

1) facebook brukernavn:
2) Present Land:
3) Beløp vunnet: $ 1,000,000.00 usd


Eduardo Saverin
Program Coordinator,
Facebook Rewards Program,
+ 1-209-300-9000
http://www.facebook.com
Alle rettigheter reservert 2014.


Google translation:

-
http://www.facebook.com
Congratulations,

As we celebrate our 10years of internet Journey and Global Communication we are pleased to announce to you that your facebook account has been randomly selected as the recipient of $ 1,000,000.00usd 2014 Facebook account of the Year {Grand rewards the winner}.

Email below details:
[email protected]

1) facebook username:
2) Present Country:
3) Amount Won: $ 1,000,000.00 usd


Eduardo Saverin
Program Coordinator,
Facebook Rewards Program,
+ 1-209-300-9000
http://www.facebook.com
All rights reserved 2014.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#235099 by Tim Atem Wed Jan 21, 2015 1:43 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 213.181.206.95
Originating ISP: Business Telecom Tavkozlesi Nyilvanosan Mukodo Res
City: Fót
Country of Origin: Hungary
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.202.55.87 with SMTP id e84csp1323095oia;
Tue, 20 Jan 2015 10:00:23 -0800 (PST)
X-Received: by 10.180.73.143 with SMTP id l15mr48530402wiv.24.1421776822682;
Tue, 20 Jan 2015 10:00:22 -0800 (PST)
Return-Path: <[email protected]>
Received: from mx-gw-95.businesstelecom.hu (mx-gw-95.businesstelecom.hu. [213.181.206.95])
by mx.google.com with ESMTP id mv7si6883078wib.52.2015.01.20.10.00.05;
Tue, 20 Jan 2015 10:00:22 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=213.181.206.95;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected]
Received: from ns1.businesstelecom.hu (unknown [10.255.1.3])
by mx-gw-95.businesstelecom.hu (Postfix) with ESMTP id 830242872;
Tue, 20 Jan 2015 18:39:29 +0100 (CET)
Received: from webmail.btel.hu (unknown [10.255.1.18])
(Authenticated sender: [email protected])
by ns1.businesstelecom.hu (Postfix) with ESMTPA id A09E740D01;
Tue, 20 Jan 2015 18:59:55 +0100 (CET)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 8bit
Date: Tue, 20 Jan 2015 17:58:57 +0000
From: facebook <[email protected]>
To: undisclosed-recipients:;
Subject: -- http://www.facebook.com Herzlichen =?UTF-8?Q?Gl=C3=BCckwunsch=2C?=
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Return-Receipt-To: facebook <[email protected]>
Disposition-Notification-To: facebook <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.9.2


--
http://www.facebook.com
Herzlichen Glückwunsch,

Achse Wir feiern unsere 10 Jahre oder Internet Journey und Global Communication Wir sind rutschig, um Ihnen mitzuteilen, dass Ihre Facebook-Konto wurden nach dem Zufallsprinzip als Begünstigter in der 2014 Facebook-Konto des Jahres Sieger} {Belohnungen Groß ausgewählt oder $ 1,000,000.00usd.

Mailen Sie uns die Details unten:
[email protected]

1) Facebook-Benutzername:
2) Vorlage von Land des Wohnsitzes:
3) Betrag: Gewonnen: $ 1.000.000,00 usd


Eduardo Saverin
Programm-Koordinator,
Facebook-Rewards-Programm,
+ 1-209-300-9000
http://www.facebook.com
Alle Rechte vorbehalten 2014.



-
http://www.facebook.com
Congratulations,

Axis, we celebrate our 10 years or Internet Journey and Global Communication We are slippery to let you know that your Facebook Account} {Rewards United were randomly as a beneficiary of the 2014 Facebook Account of the Year winner selected or $ 1,000,000.00usd.

Please email us the details below:
updateservice.facebook @ outlook.com

1) Facebook Username:
2) Present Country of Residence:
3) Amount Won: $ 1,000,000.00 usd


Eduardo Saverin
Program Coordinator,
Facebook Rewards program
+ 1-209-300-9000
http://www.facebook.com
All rights reserved 2014th

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5

Who is online

Users browsing this forum: No registered users and 6 guests