Scams re-targeting those who have already been victimized
#257410 by Faizan Docherty Sun Jun 21, 2015 11:23 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 100.37.2.21
Originating ISP: Verizon Fios
City: New York
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.79.119.17 with SMTP id s17csp1172633ivc;
Sat, 20 Jun 2015 13:29:14 -0700 (PDT)
X-Received: by 10.70.56.4 with SMTP id w4mr44779457pdp.148.1434832154097;
Sat, 20 Jun 2015 13:29:14 -0700 (PDT)
Return-Path: <[email protected]>
Received: from ns.shinko-technos.co.jp (ns.shinko-technos.co.jp. [210.251.252.250])
by mx.google.com with ESMTP id uy7si22374194pbc.246.2015.06.20.13.29.07;
Sat, 20 Jun 2015 13:29:14 -0700 (PDT)
Received-SPF: fail (google.com: domain of [email protected] does not designate 210.251.252.250 as permitted sender) client-ip=210.251.252.250;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of [email protected] does not designate 210.251.252.250 as permitted sender) [email protected]
Received: from User (static-100-37-2-21.nycmny.fios.verizon.net [100.37.2.21])
by ns.shinko-technos.co.jp (Postfix) with ESMTP id 3DECB1161F;
Sun, 21 Jun 2015 05:28:16 +0900 (JST)
Reply-To: <[email protected]>
From: "Office of the IMF"<[email protected]>
Subject: UNPAID FUND RECOVERED LETTER
Date: Sat, 20 Jun 2015 16:27:06 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <[email protected]>
To: undisclosed-recipients:;


Office of the IMF Managing Director
700 19th St NW Washington, D.C.
DC 20431, USA
Attn Dear,

2015 UNPAID FUND RECOVERED LETTER

In our efforts to foster global monetary cooperation, secure financial stability and facilitate individual and company economic growth. The IMF through our international monitoring network has recovered your UNPAID FUND that has been on hold. We hereby advise you to reconfirm your information below to enable our payment bank, Citibank contact you for cash payment immediately.

Re-confirm as follows

(1) Your Full Name........?
(2) Full Residential Address: (P.O.BOX NOT ALLOWED)?
(3) Country/State..........?
(4) Beneficiary Amount?
(5) Direct and Current Phone?
(6) Passport identification?

Note: The above information is necessary to certify that you are the rightful beneficiary of the said funds As soon as we confirm these information, our payment Bank (CITIBANK/USA) will contact you for immediate payment.

Thanks

Your sincere
Ms. Christine Lagarde,
IMF Managing director
[email protected]
+1 (916) 740-6207
http://www.imf.org

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

#257675 by Faizan Docherty Tue Jun 23, 2015 6:46 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 196.32.158.34
Originating ISP: Centennial De Puerto Rico
City: n/a
Country of Origin: Puerto Rico
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.79.119.17 with SMTP id s17csp1958909ivc;
Mon, 22 Jun 2015 03:48:57 -0700 (PDT)
X-Received: by 10.70.133.230 with SMTP id pf6mr45413029pdb.56.1434970137281;
Mon, 22 Jun 2015 03:48:57 -0700 (PDT)
Return-Path: <[email protected]>
Received: from sv-postfix-006.sunnyvision.com (sv-postfix-006.sunnyvision.com. [123.242.228.50])
by mx.google.com with ESMTP id t3si29112514pdj.75.2015.06.22.03.48.56
for <snipped>;
Mon, 22 Jun 2015 03:48:57 -0700 (PDT)
Received-SPF: neutral (google.com: 123.242.228.50 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=123.242.228.50;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 123.242.228.50 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Message-Id: <5587e819.e324460a.292f.ffffd045SMTPIN_ADDED_MISSING@mx.google.com>
Received: from mail.venhouse.com (unknown [117.18.64.10])
by sv-postfix-006.sunnyvision.com (Postfix) with ESMTP id 5885DC2DF5
for <snipped>; Mon, 22 Jun 2015 18:48:36 +0800 (HKT)
Received: (qmail 11129 invoked by uid 89); 22 Jun 2015 10:48:34 -0000
Received: from unknown (HELO User) ([email protected]@196.32.158.34)
by 0 with ESMTPA; 22 Jun 2015 10:48:34 -0000
Reply-To: <[email protected]>
From: "Mr Andrew Tweedie"<[email protected]>
Subject: Did You Sign The Power Of Attorney
Date: Mon, 22 Jun 2015 11:48:34 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000


INTERNATIONAL MONETARY FUND (IMF)
DEPT: WORLD DEBT RECONCILIATION AGENCIES.
ADVISE: YOUR OUTSTANDING PAYMENT NOTIFICATION


A power of attorney was forwarded to our office this morning by two gentle men, one of them is an American national and he is MR DAVID DEANE by name while the other person is MR... JACK MORGAN by name a CANADIAN national.
This gentlemen claimed to be your representative, and this power of attorney stated that you are dead, they brought an account to replace your information in other to claim your fund of $12.5 Million Usd which is now lying DORMANT and UNCLAIMED, below is the new account they have submitted:

BANK.-HSBC CANADA
Vancouver, CANADA
ACCOUNT NO. 2984-0008-66

Be further informed that this power of attorney also stated that you suffered and died of throat cancer. You are therefore given 24hrs to confirm the truth in this information, If you are still alive, You are to contact us back immediately, Because we work 24 hrs just to ensure that we monitor all the activities going on in regards to the transfer of beneficiaries inheritance and contract payment.
You are to reply to this office immediately for clarifications on this matter as we shall be available 24 hrs to attend to you and give you the necessary guidelines on how to ensure that your payment is wired to you immediately.
Just also be informed that any further delay from your side could be dangerous, as we would not be held responsible of wrong payment.



Mr Andrew Tweedie
Finance Department Director
International Monetary Funds Agents

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#259334 by Faizan Docherty Tue Jul 07, 2015 7:36 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 208.125.16.142
Originating ISP: Time Warner Cable
City: New York
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.79.89.196 with SMTP id n187csp1379365ivb;
Sun, 5 Jul 2015 23:48:32 -0700 (PDT)
X-Received: by 10.66.119.136 with SMTP id ku8mr101564437pab.19.1436165311890;
Sun, 05 Jul 2015 23:48:31 -0700 (PDT)
Return-Path: <[email protected]>
Received: from server17.joeswebhosting.net (server17.joeswebhosting.net. [202.218.48.5])
by mx.google.com with ESMTPS id ou9si27373528pbc.41.2015.07.05.23.48.30
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 05 Jul 2015 23:48:31 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 202.218.48.5 as permitted sender) client-ip=202.218.48.5;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 202.218.48.5 as permitted sender) [email protected]
Message-Id: <[email protected]>
Received: from [208.125.16.142] (port=29697 helo=User)
by server17.joeswebhosting.net with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1ZC09F-0000e0-Bj; Mon, 06 Jul 2015 15:45:01 +0900
Reply-To: <[email protected]>
From: "Office of the IMF"<[email protected]>
Subject: UNPAID FUND RECOVERED LETTER
Date: Mon, 6 Jul 2015 02:53:19 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server17.joeswebhosting.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gzhu.edu.cn


Office of the IMF Managing Director
700 19th St NW Washington, D.C.
DC 20431, USA
Attn Dear,

2015 UNPAID FUND RECOVERED LETTER

In our efforts to foster global monetary cooperation, secure financial stability and facilitate individual and company economic growth. The IMF through our international monitoring network has recovered your UNPAID FUND that has been on hold. We hereby advise you to reconfirm your information below to enable our payment bank, Citibank contact you for cash payment immediately.

Re-confirm as follows

(1) Your Full Name........?
(2) Full Residential Address: (P.O.BOX NOT ALLOWED)?
(3) Country/State..........?
(4) Beneficiary Amount?
(5) Direct and Current Phone?
(6) Passport identification?

Note: The above information is necessary to certify that you are the rightful beneficiary of the said funds As soon as we confirm these information, our payment Bank (CITIBANK/USA) will contact you for immediate payment.

Thanks

Your sincere
Ms. Christine Lagarde,
IMF Managing director
[email protected]
+1 (916) 740-6207
http://www.imf.org

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#281623 by Tim Atem Sun Jan 17, 2016 9:32 am
Andrew Tweedie is still at it using the email address [email protected]

ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 185.3.133.146
Originating ISP: Inter Connects Inc
City: n/a
Country of Origin: Sweden
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.107.39.74 with SMTP id n71csp870485ion;
Fri, 15 Jan 2016 16:47:40 -0800 (PST)
X-Received: by 10.55.75.203 with SMTP id y194mr17312039qka.2.1452905260376;
Fri, 15 Jan 2016 16:47:40 -0800 (PST)
Return-Path: <[email protected]>
Received: from fortimail.uninter.com (mx.uninter.com. [187.95.99.52])
by mx.google.com with ESMTPS id v17si16245128qhb.37.2016.01.15.16.47.39
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 15 Jan 2016 16:47:40 -0800 (PST)
Received-SPF: neutral (google.com: 187.95.99.52 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=187.95.99.52;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 187.95.99.52 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from india.facinter.br (56.99.95.187.dynamic.copel.net [187.95.99.56] (may be forged))
by fortimail.uninter.com with ESMTP id u0G0lU1D019864-u0G0lU1F019864
(version=TLSv1.0 cipher=AES128-SHA bits=128 verify=NOT);
Fri, 15 Jan 2016 22:47:31 -0200
Message-Id: <[email protected]>
DomainKey-Signature: <snipped>
Received: from User by old.facinter.br (MDaemon PRO v11.0.3)
with ESMTP id md50013151908.msg;
Fri, 15 Jan 2016 22:32:22 -0200
X-Spam-Processed: india.old.facinter.br, Fri, 15 Jan 2016 22:32:22 -0200
(not processed: spam filter heuristic analysis disabled)
X-Authenticated-Sender: [email protected]
X-MDRemoteIP: 185.3.133.146
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
Reply-To: <[email protected]>
From: "International Monetary Fund"<[email protected]>
Subject: DID YOU SIGN THE POWER OF ATTORNEY
Date: Fri, 15 Jan 2016 16:32:02 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-FEAS-SYSTEM-WL: [email protected]


INTERNATIONAL MONETARY FUND (IMF)
DEPT: WORLD DEBT RECONCILIATION AGENCIES. ADVISE: YOUR OUTSTANDING PAYMENT NOTIFICATION

A power of attorney was forwarded to our office this morning by two gentle men, one of them is an American national and he is MR DAVID DEANE by name while the other person is MR... JACK MORGAN by name a CANADIAN national. This gentlemen claimed to be your representative, and this power of attorney stated that you are dead, they brought an account to replace your information in other to claim your fund of $12.5 Million Usd which is now lying DORMANT and UNCLAIMED, below is the new account they have submitted:

BANK.-HSBC CANADA Vancouver, CANADA ACCOUNT NO. 2984-0008-66

Be further informed that this power of attorney also stated that you suffered and died of throat cancer. You are therefore given 24hrs to confirm the truth in this information, If you are still alive, You are to contact us back immediately, Because we work 24 hrs just to ensure that we monitor all the activities going on in regards to the transfer of beneficiaries inheritance and contract payment. You are to call this office immediately for clarifications on this matter as we shall be available 24 hrs to speak with you and give you the necessary guidelines on how to ensure that your payment is wired to you immediately. Just also be informed that any further delay from your side could be dangerous, as we would not be held responsible of wrong payment.

Mr Andrew TweediePhone : +447045787438
Finance Department Director
International Monetary Funds Agents

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5

Who is online

Users browsing this forum: No registered users and 14 guests