Scams re-targeting those who have already been victimized
#265988 by Tim Atem Tue Sep 01, 2015 9:33 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 197.211.53.1
Originating ISP: Globacom Ltd
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.107.63.196 with SMTP id m187csp1369923ioa;
Tue, 1 Sep 2015 04:55:00 -0700 (PDT)
X-Received: by 10.194.192.72 with SMTP id he8mr32945476wjc.11.1441108500336;
Tue, 01 Sep 2015 04:55:00 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mx12-05.smtp.antispamcloud.com (mx12-05.smtp.antispamcloud.com. [46.165.232.175])
by mx.google.com with ESMTPS id fx1si2751673wic.87.2015.09.01.04.54.59
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 01 Sep 2015 04:55:00 -0700 (PDT)
Received-SPF: neutral (google.com: 46.165.232.175 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=46.165.232.175;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 46.165.232.175 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from l13.daha.net ([46.28.239.245])
by mx12.antispamcloud.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.85)
(envelope-from <[email protected]>)
id 1ZWk9R-0003py-3B
for <snipped>; Tue, 01 Sep 2015 13:54:59 +0200
Received: from iplekepc by l13.daha.net with local (Exim 4.85)
(envelope-from <[email protected]>)
id 1ZWk9H-0003b5-Gf
for <snipped>; Tue, 01 Sep 2015 14:54:47 +0300
To: <snipped>
Subject: UN Compensation Notice
X-PHP-Script: iplekepcekulakameliyati.com/wp-content/themes/mailer.php for 197.211.53.1
X-PHP-Originating-Script: 762:mailer.php
Date: Tue, 1 Sep 2015 14:54:47 +0300
From: UNITED NATION COMPENSATION DEPARTMENT. <[email protected]>
Message-ID: <[email protected]>
X-Priority: 3
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="us-ascii"
X-Filter-ID: <snipped>
X-Report-Abuse-To: [email protected]
X-Filter-Fingerprint: <snipped>
X-Originating-IP: 46.28.239.245
X-Spampanel-Domain: dahasmtp.com
X-Spampanel-Username: 46.28.239.245
Authentication-Results: antispamcloud.com; auth=pass [email protected]
X-Spampanel-Outgoing-Class: unsure
X-Spampanel-Outgoing-Evidence: Combined (0.74)
X-Recommended-Action: accept


Hello,

Can you please confirm if you have receive a notification from the United Nation Compensation Department.

I have an important information for you, Kindly revert back to my private email as below or give me a call.

I will patiently wait for your urgent reply.

Thanks
Mr. Jegajothy
UNDP HEAD OFFICE
[email protected]

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
Advertisement

#266919 by Tim Atem Tue Sep 08, 2015 1:50 pm
They're also using the email address [email protected] and the name Gaskin Bobby


Delivered-To: <snipped>
Received: by 10.55.185.133 with SMTP id j127csp806046qkf;
Mon, 7 Sep 2015 15:21:43 -0700 (PDT)
X-Received: by 10.60.81.166 with SMTP id b6mr16353668oey.31.1441664503519;
Mon, 07 Sep 2015 15:21:43 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-oi0-x244.google.com (mail-oi0-x244.google.com. [2607:f8b0:4003:c06::244])
by mx.google.com with ESMTPS id t7si742250oit.108.2015.09.07.15.21.43
for <<snipped>>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 07 Sep 2015 15:21:43 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4003:c06::244 as permitted sender) client-ip=2607:f8b0:4003:c06::244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4003:c06::244 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-oi0-x244.google.com with SMTP id e134so5260162oig.2
for <<snipped>>; Mon, 07 Sep 2015 15:21:43 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.202.205.133 with SMTP id d127mr16062416oig.9.1441664503141;
Mon, 07 Sep 2015 15:21:43 -0700 (PDT)
Received: by 10.182.188.40 with HTTP; Mon, 7 Sep 2015 15:21:43 -0700 (PDT)
Date: Tue, 8 Sep 2015 05:21:43 +0700
Message-ID: <CANe8kcK97Q5EK+Gwf5e5zygEeycth7G6U3B0SQUG0sADytsP2Q@mail.gmail.com>
Subject: Re: UN Compensation Notice
From: United Nation Compensation <[email protected]>
To: <<snipped>>


Please write me to my personal email address as below. I look forward to seeing your reply and I will give you a complete information, and this will be of a great benefit for both of us base on your understanding and cooperation to work hand in hand with me for our mutual interest and life time investment.

Regards
Gaskin Bobby
Private email: [email protected]

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5

Who is online

Users browsing this forum: No registered users and 20 guests