Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#174482 by Faizan Docherty Tue Aug 20, 2013 1:02 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 82.114.70.142
Originating ISP: Kujtesa Internet Services
City: Skënderaj
Country of Origin: Albania
* For a complete report on this email header goto ipTRACKERonline


X-Apparently-To: <snipped> via 98.139.211.138; Mon, 19 Aug 2013 08:54:40 -0700
Return-Path: <[email protected]>
X-YahooFilteredBulk: 82.57.200.119
Received-SPF: none (domain of alice.it does not designate permitted sender hosts)
X-YMailISG: <snipped>
X-Originating-IP: [82.57.200.119]
Authentication-Results: mta1154.mail.gq1.yahoo.com from=alice.it; domainkeys=neutral (no sig); from=alice.it; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp303.alice.it) (82.57.200.119)
by mta1154.mail.gq1.yahoo.com with SMTP; Mon, 19 Aug 2013 08:54:39 -0700
Received: from feu14-alice (82.57.204.69) by smtp303.alice.it (8.6.060.28)
id 51F28CF900B57E3E; Mon, 19 Aug 2013 17:26:51 +0200
Received: from (82.114.70.142) by wmlight.rossoalice.alice.it; Mon, 19 Aug 2013 17:26:51 +0200
Message-ID: <[email protected]>
Date: Mon, 19 Aug 2013 17:26:51 +0200 (CEST)
From: Mrs Maria Jonathan <[email protected]>
Reply-To: [email protected]
Subject: payment
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: 82.114.70.142
Content-Length: 457


Attn. I want to acknowledge you that we have finally succeeded in getting your
package worth’s $7.5million out of (ECOWAS) Economic Community of West
African
States department Get in touch with John Nelson for delivery of the package. E-
mail: [email protected] Phone +22 99 951 53oo.

he's in the united state right now endeavor to reconfirm your delivery address
to him!

Thanks
Mrs Maria Jonathan
Director, TNT Express

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

#271038 by thrasher4 Mon Oct 12, 2015 12:44 pm
Return-Path: [email protected]
Received: from mip.hushmail.com (LHLO smtp5.hushmail.com) (65.39.178.78) by
server with LMTP; Mon, 12 Oct 2015 00:43:40 +0000 (UTC)
Received: from smtp5.hushmail.com (localhost [127.0.0.1])
by smtp5.hushmail.com (Postfix) with SMTP id A97856018C
for <>; Mon, 12 Oct 2015 00:43:46 +0000 (UTC)
X-Hush-Verified-Domain: yahoo.com
X-Hush-Real-Recipient:
X-hush-tls-connected: 1
Received: from nm16-vm2.bullet.mail.ne1.yahoo.com (nm16-vm2.bullet.mail.ne1.yahoo.com [98.138.91.92])
(using TLSv1 with cipher RC4-SHA (128/128 bits))
(No client certificate requested)
by smtp5.hushmail.com (Postfix) with ESMTPS
for <>; Mon, 12 Oct 2015 00:43:46 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1444610625; bh=qJoBwZ9/YjqQrxP8wchNHJPAvd780V1DI14aHa9JX9g=; h=Date:From:Subject:To:In-Reply-To:From:Subject; b=gpDta/c2vXF190m1XqGM/1LPObhv3joOm4OwGsdNNejs/WNuoqHJJrlgiGgUWmGKJ95BCC6xDLVtcVfauZXDP6Dam3LGklTTad+J/JObXLsfnVEx3A0sMCin7he2HCs2/i6NUj9WaB1HJy2AII2BKl7l6o4oDdBCQAq/vpKqB/fhpN0UT9DsohKjMy1qJcffgjNc0EXOjPqhaY1WvGMrn+73Q2G/hg/5rYkV60tD4phzcFtppw2DRbViHwm8BYNSNP91iCHgqGqng3qJvdvkgzfCgeacplefCcepGMoYNGLgCTKgMINvXKAmKguZdg50DyYFE2NNv838DQusJCYGIQ==
Received: from [98.138.101.130] by nm16.bullet.mail.ne1.yahoo.com with NNFMP; 12 Oct 2015 00:43:45 -0000
Received: from [98.138.87.10] by tm18.bullet.mail.ne1.yahoo.com with NNFMP; 12 Oct 2015 00:43:45 -0000
Received: from [127.0.0.1] by omp1010.mail.ne1.yahoo.com with NNFMP; 12 Oct 2015 00:43:45 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 66493 invoked by uid 60001); 12 Oct 2015 00:43:45 -0000
X-YMail-OSG: HWsNldMVM1kQ2j5i2vB5Y1bg2at4xZasCa0HXI9aFyyrUKd
ClbI2322dg.EdZVcG.UHQAY7_cob2zfkaqAqpSBXyDd1QPcSrz3OutOF4DG7
8R9fbfwwMQIZ_jfCobzEv42_NxA7266RYtcNCUF.3dAFBCIZcsTXAxwgPD1A
nLuqa_gfGsU3aTbl6bV8gKVKUShbJYd_ioT.mb9p4VrcyS1yG68jkmYu_O6v
iAiGwEPfZxjLcG0GpkOCfSyWXf2LoSbbiUOn9kd4SBLnQQZFjXUbs_D1HAn5
Du6BUAPXK_0kdSy6SOr._lumyB4AUPJlvjgHsWLLkIixq6_1MjrJPSrMl_fW
gDOH5icnxFJvnhlX0PV2ef3PqYU7HTerK1MTD0tfTiUBv8L_.JLFYMFSJfEG
Cqvgiv1MAU8ddxPue5ZVfqvCq5VfocFRs_syBIRQLBhEH3lu1VBykI1Im8zn
BpA5PSdLQsj1CP.HvPbbgRhWDlcxlB4IK2ukhTj9A4oQpBeRa5QVedqhJd1_
_XD4Ao8QsDF.P7iAtj90EY5n8rChJnRY-
Received: from [41.86.234.165] by web121504.mail.ne1.yahoo.com via HTTP; Sun, 11 Oct 2015 17:43:44 PDT
X-Rocket-MIMEInfo: 002.001,SSBhbSBpbiByZWNlaXB0IG9mIHlvdXIgbWVzc2FnZSxzaW5jZSB5b3Ugc2hvb3NlIGZlZGV4IGRpcGxvbWF0IGRlbGl2ZXJ5LGl0DQp3aWxsIGNvc3QgeW91ICQzNTAwIGRvbGxhcnMgYW5kIGlmIHlvdSBoYXZlIGFjY2VwdCB0byBzZW5kIHRoZSBtb25leSx3ZSB3aWxsDQpwcm92aWRlIHlvdSBhbiBhY2NvdW50IGluZm8gdG8gcGF5IGluIHRoZSBtb25leS5yZXBseSB0byBtZSBhcyBzb29uIGFzDQpwb3NzaWJsZS4NCg0KTVIgTU9IQU1NRUQgVEFOS08NCkRJUkVDVE9SIEdFTkVSQUwgLg0KQ0FMTCArMjI5IDkBMAEBAQE-
X-Mailer: YahooMailBasic/786 YahooMailWebService/0.8.203.817
Message-ID: <[email protected]>
Date: Sun, 11 Oct 2015 17:43:44 -0700
From: Fedexs Ervices <[email protected]>
Subject: Contact Fedexl Express Delivery Services Benin Republic
To: "" <>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii

I am in receipt of your message,since you shoose fedex diplomat delivery,it
will cost you $3500 dollars and if you have accept to send the money,we will
provide you an account info to pay in the money.reply to me as soon as
possible.

MR MOHAMMED TANKO
DIRECTOR GENERAL .
CALL +229 99515300

Return-Path: [email protected]
Received: from mip.hushmail.com (LHLO smtp3.hushmail.com) (65.39.178.78) by
server with LMTP; Sun, 11 Oct 2015 23:28:37 +0000 (UTC)
Received: from smtp3.hushmail.com (localhost [127.0.0.1])
by smtp3.hushmail.com (Postfix) with SMTP id 16A81E013B
for <>; Sun, 11 Oct 2015 23:28:43 +0000 (UTC)
X-Hush-Verified-Domain: yahoo.com
X-Hush-Real-Recipient:
X-hush-tls-connected: 1
Received: from nm27-vm2.bullet.mail.ne1.yahoo.com (nm27-vm2.bullet.mail.ne1.yahoo.com [98.138.91.215])
(using TLSv1 with cipher RC4-SHA (128/128 bits))
(No client certificate requested)
by smtp3.hushmail.com (Postfix) with ESMTPS
for <>; Sun, 11 Oct 2015 23:28:42 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1444606121; bh=3jKZiICB3xABlfIBOR4g2xCk6i/zrK/TOyxg9Y4fSQw=; h=Date:From:Subject:To:From:Subject; b=uIzo3GLcEbSmXEgxs3/+AzNNUy4XbkXfQv3KT3ZLJqr26BTeF0DaUmREapa8HdveLb7sElWhI+qTpfAw1zJMj9UpKQDkvVL/pYVWqzg8CYAwmPUnNqgaI+eW6yqG7a5TJbeqZYU0CpP0xItff6lWt2L8O2wMhgS7Bc0auZaD/DHosRoomrKJmt3c1r4dJvGuLjzhuXTWAO6jtVJqpj7W0KgqRV1vBfxV3+SFlKC3dSUEkuB4unkri0AuOLrOkQ7cvAF1a99fPl8uaZcE+MPo2yaO+LjEnyRLRAKM+TD1PLQ0cYb/JGa7ptCYlEr5HeH+VxVzfB4ilPftOJdRaWwnrg==
Received: from [98.138.100.103] by nm27.bullet.mail.ne1.yahoo.com with NNFMP; 11 Oct 2015 23:28:41 -0000
Received: from [98.138.89.199] by tm102.bullet.mail.ne1.yahoo.com with NNFMP; 11 Oct 2015 23:28:41 -0000
Received: from [127.0.0.1] by omp1057.mail.ne1.yahoo.com with NNFMP; 11 Oct 2015 23:28:41 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 16146 invoked by uid 60001); 11 Oct 2015 23:28:41 -0000
X-YMail-OSG: KXB7g3QVM1kWyYGBW1rVQv0OXfjDx16TXqO007wImMWyGZF
O4YDwlQFW5MRRNr8XifTEj7TKqrNM5l5C4OP6bKG0wAjHRrMcb7lDEURbzX6
Fcp0.q9Pocn2XIwiI9zvCYZmVZhK4cUsnpGWkI1wvEClvSq2VpEBk45E7l12
Z0C.fDftgDOeODVoJyW6ME1TW5gGE7rfm4DApLS6z_8h6_7nYd10Dc75gTDo
NxlweXJZeK_MZXhXcH7nohnOGSghnttast3t3r2LBU.U5lAPtB.b.Cj6BFkV
FnU3w8dDwizFMlJcpYoT_QHiHSGpxPVM97Pdjr3uJV5.zM.m7MAQvWC.nezV
CGMjcf962GE2u4YzKrDbDLhG27XZqZd97vJM7eOnN8A8M2smyEeS65lkochF
pfLKkjYrz5iWgtXpZiwzpwZn47RVybJBw8v0xJkN0UA8qSxN4bS3nnx7xA2j
nk0tXJTZD1bxow47i1YQf9GTUrNr_JlGdp8r604B_RMNexxq5fVIyCMhaMUv
E1ymPg6KuH.81qze7yaOSDTDq2OhPe9dZqgl0aUl2s1ekzocIxvuuAyMgzlD
fdMoW2W80
Received: from [41.86.234.165] by web121506.mail.ne1.yahoo.com via HTTP; Sun, 11 Oct 2015 16:28:41 PDT
X-Rocket-MIMEInfo: 002.001,IEFUVE4NCg0KSSBoYXZlIHBhaWQgdGhlIGZlZSBmb3IgeW91ciBDaGVxdWUgZHJhZnQgYW5kIGkgdG9vayBpdCB0byB0aGUgRklOQU5DSUFMDQpCQU5LIFBMQyB0byBjb25maXJtIGl0IHRoZW4gdGhlIE1hbmFnZXIgb2YgdGhlIEJhbmsgTVIgQkVOQVJEIFVHTyB0b2xkIG1lDQp0aGF0IGJlZm9yZSB0aGUgY2hlY2sgY2FuIGdldCB0byB5b3UgaXQgd2lsbCBleHBpcmUgb24gdGhlIHdheSBhbmQgaWYgaXQNCmV4cGlyZWQgaXQgd2lsbCBiZWNvbWUgdXNlbGVzcyBzbyBIZSBhZHZpY2UgbWUgdG8gY29udmVydCABMAEBAQE-
X-Mailer: YahooMailBasic/786 YahooMailWebService/0.8.203.817
Message-ID: <[email protected]>
Date: Sun, 11 Oct 2015 16:28:41 -0700
From: Fedexs Ervices <[email protected]>
Subject: [Suspected Junk Mail] Contact Fedexl Express Delivery Services Benin Republic
To:
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii

ATTN

I have paid the fee for your Cheque draft and i took it to the FINANCIAL
BANK PLC to confirm it then the Manager of the Bank MR BENARD UGO told me
that before the check can get to you it will expire on the way and if it
expired it will become useless so He advice me to convert $7.5usa
(SEVEN MILLION FIVE HUNDRED
THOUSAND US DOLLARS) into cash and pack it into the strong iron box and

deposite it in FEDEX EXPRESS DELIVERY COMPANY BENIN REPUBLIC to deliver
it in cash to you.and i did it as he advice me because he is a Banker he
knows the durability of any foriegn check or draft.
I deposited the package in the Fedex Express Delivery Company as an
cotton materials for secuirty reasons.This is the registration Number of
your Package fed/122p/mtm/2009 Zip Code;0113388 so do not let the company
to know the real
contents of the package so that they can deliver it for you safely. I want
you to

contact the company immediately with the following informations,i give
them your information but you need to reconfirm it for them again. Below
is the required infomation you need to give them now.
1.YOUR FULL NAME______________
2.YOUR HOME ADDRESS.______________
3.YOUR COUNTRY_______________
4.YOUR CURRENT HOME TELEPHONE NUMBER._______________
5.YOUR CURRENT OFFICE TELEPHONE.______________
6..A COPY OF YOUR PICTURE_____________


All these things is needed from you now to submmit to the company for
urgent delivery of your package contains $7.5usa US Dollar Please
contact the delivery company immediately and reconfirm your info to them
to enable their agent locate you when he arrived in your country. This is
the company contact information.
MR MOHAMMED TANKO Director General
Fedex Express Delivery Company Benin Republic.
Email:([email protected])

Please contact the company immediately you receive this email so that your
package will leave tonight to be deliver to you. Get back to me as soon as
you receive your package
from the company.
ours Faithfully
Barrister Ben Rochas
#287803 by Tim Atem Thu Mar 10, 2016 11:40 am
Still at it using [email protected]

from: Barrister Ben Rochas - ATM1.@luck.ocn.ne.jp
reply-to: [email protected]

ATTN

I have paid the fee for your Cheque draft and i took it to the FINANCIAL
BANK PLC to confirm it then the Manager of the Bank MR BENARD UGO told me
that before the check can get to you it will expire on the way and if it
expired it will become useless so He advice me to convert $7.5usa
(SEVEN MILLION FIVE HUNDRED
THOUSAND US DOLLARS) into cash and pack it into the strong iron box and

deposite it in FEDEX EXPRESS DELIVERY COMPANY BENIN REPUBLIC to deliver
it in cash to you.and i did it as he advice me because he is a Banker he
knows the durability of any foriegn check or draft.
I deposited the package in the Fedex Express Delivery Company as an
cotton materials for secuirty reasons.This is the registration Number of
your Package fed/122p/mtm/2009 Zip Code;0113388 so do not let the company
to know the real
contents of the package so that they can deliver it for you safely. I want
you to

contact the company immediately with the following informations,i give
them your information but you need to reconfirm it for them again. Below
is the required infomation you need to give them now.
1.YOUR FULL NAME______________
2.YOUR HOME ADDRESS.______________
3.YOUR COUNTRY_______________
4.YOUR CURRENT HOME TELEPHONE NUMBER._______________
5.YOUR CURRENT OFFICE TELEPHONE.______________
6..A COPY OF YOUR PICTURE_____________

All these things is needed from you now to submmit to the company for
urgent delivery of your package contains $7.5usa US Dollar Please
contact the delivery company immediately and reconfirm your info to them
to enable their agent locate you when he arrived in your country. This is
the company contact information.
MR MOHAMMED TANKO Director General
Fedex Express Delivery Company Benin Republic.
Email:([email protected])

Please contact the company immediately you receive this email so that your
package will leave tonight to be deliver to you. Get back to me as soon as
you receive your package
from the company.
ours Faithfully

Barrister Ben Rochas

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5

Who is online

Users browsing this forum: Yahoo [Bot] and 21 guests