Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#239477 by Faizan Docherty Fri Feb 27, 2015 10:58 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 108.85.194.42
Originating ISP: At&t U-verse
City: Pasadena
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.43.144 with SMTP id r138csp3800576lfr;
Fri, 27 Feb 2015 01:02:22 -0800 (PST)
X-Received: by 10.229.3.8 with SMTP id 8mr27626500qcl.12.1425027741721;
Fri, 27 Feb 2015 01:02:21 -0800 (PST)
Return-Path: <[email protected]>
Received: from phenix.apoyaygana.com (phenix.apoyaygana.com. [216.22.24.184])
by mx.google.com with ESMTPS id b89si3431939qgf.111.2015.02.27.01.02.19
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 27 Feb 2015 01:02:21 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 216.22.24.184 as permitted sender) client-ip=216.22.24.184;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 216.22.24.184 as permitted sender) [email protected];
dkim=pass [email protected]
Message-Id: <54f0329d.62698c0a.41d4.ffffb9fcSMTPIN_ADDED_MISSING@mx.google.com>
DKIM-Signature: <snipped>;
Received: from 108-85-194-42.lightspeed.irvnca.sbcglobal.net ([108.85.194.42]:58841 helo=User)
by phenix.apoyaygana.com with esmtpa (Exim 4.85)
(envelope-from <[email protected]>)
id 1YRGoC-0000WM-An; Fri, 27 Feb 2015 04:02:11 -0500
Reply-To: <[email protected]>
From: "Mr. Smith Morgan"<[email protected]>
Subject: Investment Offer.
Date: Fri, 27 Feb 2015 01:02:19 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - phenix.apoyaygana.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - apoyaygana.com
X-Get-Message-Sender-Via: phenix.apoyaygana.com: authenticated_id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:


Dear Friend,

Re: Investment Offer.

I am Mr. Smith Morgan. a consultant for trade, having sourced your contact; I have a client who has good amount of money to invest in your country into real estate, buying of hotel or in any viable and profitable venture that you will recommend. To enable us commence immediately on this transaction, kindly furnish me on your reply the followings:

Your Name & Company name:
Direct Private Phone & Fax number:
Position Held in the company:
Your present Location Address:

Upon receipt of your mail and readiness to proceed with us, we shall arrange for a meeting to discuss terms and condition. Please be assured that the funds are from a clean origin, all the necessary facts and documents to back up the fund will be presented during the meeting. Upon your response, more details will be
given to you.

Best regards,

Mr. Smith Morgan.
{Financial Consultant}.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: No registered users and 99 guests