Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#186822 by Faizan Docherty Thu Jan 09, 2014 2:52 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP:<br>Originating ISP: Vodafone Ghana<br> City: n/a<br>Country of Origin: Ghana<br>* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by with SMTP id f9csp38283wbi;
Tue, 7 Jan 2014 04:56:23 -0800 (PST)
X-Received: by with SMTP id v18mr65849885yhj.1.1389099382658;
Tue, 07 Jan 2014 04:56:22 -0800 (PST)
Return-Path: <[email protected]>
Received: from active.host-care.com (active.host-care.com. [])
by mx.google.com with ESMTPS id s6si20136227yho.14.2014.
for <multiple recipients>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 07 Jan 2014 04:56:22 -0800 (PST)
Received-SPF: neutral (google.com: is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=;
Authentication-Results: mx.google.com;
spf=neutral (google.com: is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from localhost ([::1]:54359 helo=legalservices-gh.com)
by active.host-care.com with esmtpa (Exim 4.82)
(envelope-from <[email protected]>)
id 1W0WBg-0006WF-Kh; Tue, 07 Jan 2014 07:55:16 -0500
Received: from ([])
(SquirrelMail authenticated user
[email protected])
by legalservices-gh.com with HTTP;
Tue, 7 Jan 2014 07:55:16 -0500
Message-ID: <50[email protected]>
Date: Tue, 7 Jan 2014 07:55:16 -0500
Subject: Good Day Dear,
From: "Mr. Ebrima Faal" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - active.host-care.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - legalservices-gh.com
X-Get-Message-Sender-Via: active.host-care.com: authenticated_id: [email protected]

Good Day Dear,

My name is Mr. Larry Morris, I am the Director head of auditing and
accounting section African Development Bank Group South Africa (ADB BANK).
With due respect and regard, I have decided to contact you on a business
transaction that will be very beneficial to both of us at the end. During
our investigation and auditing in this bank, my department came across a
very huge sum of (U.S$8.6 MILLION UNITED STATES DOLLARS). Belong to a
deceased Customer was shot dead by four men in his farm at Rietfontein,
Balfour South Africa in 2009.

I thereby contact you, to:
(1) Assist me in the transfer of the said fund into your account.
(2) Confirm your direct telephone and Fax for our communication.
(3) You most contact me through my private email address : (
[email protected])

Meanwhile, all the arrangement to put claim over this fund, as the
bonafide next of kin to the deceased, as well as getting the required
approval and Transferring this money to a foreign account has been put in
place and you will be entitled to 40% of the total sum as gratification,
while 10% will be set aside to take care of expenses that may arise during
the time of transfer and also telephone bills, while 50% will be for me,
Please respond urgently through my private email. ([email protected]

Yours sincerely

Mr. Larry Morris, RRC Director
African Development Bank Group
339 Witch-Hazel Avenue
Highveld Ext. 78
Centurion, South Africa


Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: No registered users and 14 guests