Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#172565 by Faizan Docherty Sun Jul 28, 2013 10:32 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP:<br>Originating ISP: Telkommobile<br> City: n/a<br>Country of Origin: South Africa<br>* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by with SMTP id y7csp20951vcx;
Fri, 26 Jul 2013 06:25:14 -0700 (PDT)
X-Received: by with SMTP id e1mr47676272eev.80.1374845114009;
Fri, 26 Jul 2013 06:25:14 -0700 (PDT)
Return-Path: <[email protected]>
Received: from smart03.omnibit.it (smart03.omnibit.it. [])
by mx.google.com with ESMTP id 3si5861553eem.64.2013.
for <snipped>;
Fri, 26 Jul 2013 06:25:14 -0700 (PDT)
Received-SPF: neutral (google.com: is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=;
Authentication-Results: mx.google.com;
spf=neutral (google.com: is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from mx02.omnibit.it (unknown [])
by smart03.omnibit.it (Postfix) with ESMTP id B6620546B
for <snipped>; Fri, 26 Jul 2013 15:25:11 +0200 (CEST)
Received: from localhost (localhost.localdomain [])
by mx02.omnibit.it (Postfix) with ESMTP id 26A7F76E3E
for <snipped>; Fri, 26 Jul 2013 15:25:13 +0200 (CEST)
X-Virus-Scanned: by OmniMBfilter v5 at mx02.omnibit.it
X-Spam-Flag: NO
X-Spam-Score: 3.877
X-Spam-Level: ***
X-Spam-Status: No, score=3.877 tagged_above=2.5 required=4
X-SMTP-Auth: no
Received: from lin08.wmghosting.net (lin08.wmghosting.net [])
by mx02.omnibit.it (Postfix) with ESMTP id DB09076EA0
for <snipped>; Fri, 26 Jul 2013 15:25:06 +0200 (CEST)
Received: (qmail 26320 invoked by uid 48); 26 Jul 2013 15:52:44 +0200
X-Additional-Header: /usr/share/psa-horde/imp
Received: from 8ta-228-166-61.telkomadsl.co.za
(8ta-228-166-61.telkomadsl.co.za []) by
webmail.sinergieittiche.it (Horde MIME library) with HTTP; Fri, 26 Jul 2013
15:52:43 +0200
Message-ID: <[email protected]>
Date: Fri, 26 Jul 2013 15:52:43 +0200
From: Michael Reyfields <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed;
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.1.6)

This message is in MIME format.

Contents of the attachment:


My name is Michael Reyfields; I work with the Reyfields
Investigations, a Consulting Firm in London, UK. We are
conducting a standard process investigation involving a client who
shares the same name with you and also the circumstances
surrounding investments made by this client at HSBC Bank.

The HSBC Private Banking client died intestate and nominated no
next of kin to inherit the title over the investments made with
HSBC Bank. The essence of this communication with you is to
request that you provide us information on three issues:

1-Are you aware of any relative/relation having the same
surname, whose last known contact address was Madrid, Spain?

2-Are you aware of any investment of considerable value made by
such a person at the HSBC Bank?

3-Can you establish beyond reasonable doubt your eligibility to
assume status of next of kin to the deceased?

It is pertinent that you inform us ASAP whether or not you are
familiar with this personality that we may put an end to this
communication with you and our inquiries surrounding this

You must appreciate that we are constrained from providing you
with more detailed information at this point. PLEASE RESPOND
[email protected]
as soon as possible to afford us the opportunity to close this
investigation. Thank you for accommodating our inquiry.

Yours sincerely,

Michael Reyfields
Reyfields Investigations

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: Bing [Bot], Yahoo [Bot] and 12 guests