Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#241524 by Tim Atem Sat Mar 14, 2015 6:06 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 117.247.85.150
Originating ISP: Bsnl
City: Anand
Country of Origin: India
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.202.73.207 with SMTP id w198csp235751oia;
Fri, 13 Mar 2015 19:32:55 -0700 (PDT)
X-Received: by 10.70.18.36 with SMTP id t4mr110278996pdd.66.1426300375202;
Fri, 13 Mar 2015 19:32:55 -0700 (PDT)
Return-Path: <[email protected]>
Received: from exchange.vedantagroup.net (exchange.vedantagroup.net. [117.247.85.150])
by mx.google.com with ESMTP id cd4si7262228pdb.46.2015.03.13.19.32.28;
Fri, 13 Mar 2015 19:32:55 -0700 (PDT)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=117.247.85.150;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected]
Received: from localhost (localhost.localdomain [127.0.0.1])
by exchange.vedantagroup.net (Postfix) with ESMTP id 99F811E3C500;
Sat, 14 Mar 2015 07:19:31 +0530 (IST)
X-Virus-Scanned: amavisd-new at exchange.vedantagroup.net
Received: from exchange.vedantagroup.net ([127.0.0.1])
by localhost (exchange.vedantagroup.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id HiP88rOveB1i; Sat, 14 Mar 2015 07:19:31 +0530 (IST)
Received: from exchange.vedantagroup.net (exchange.vedantagroup.net [192.168.0.50])
by exchange.vedantagroup.net (Postfix) with ESMTP id 933FC1E3A90B;
Sat, 14 Mar 2015 07:08:34 +0530 (IST)
Date: Sat, 14 Mar 2015 07:08:31 +0530 (IST)
From: philips boni <[email protected]>
Reply-To: Philips Boni <[email protected]>
Subject: Good day
Message-ID: <[email protected]>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-Mailer: Zimbra 7.1.1_GA_3196 (ZimbraWebClient - FF3.0 (Win)/7.1.1_GA_3196)
To: undisclosed-recipients:;


Good day, Your fund of $4.800,000.00 has been released and the transfer began
today through Western Union transfer $5000.00 daily. So, Contact Western Union Agent:Mr Philip Boni.

Ask him what you need to do to activate your account for the daily pick up of
your fund. Email:([email protected])

Your Receiver Name--------------
Your Country--------------------
Your City-----------------------
Your Tell-----------------------
Your Test Question--------------
Your Test Answer----------------

Forward the information ([email protected])
Or Call:Mr Philip Boni:+229-6894-7167
Thanks
Mrs Angela lily,

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
Advertisement

#243090 by Tim Atem Tue Mar 24, 2015 9:20 am
New script from the same email address:

ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.216.50.63
Originating ISP: Opt Benin / Benin Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.202.73.207 with SMTP id w198csp1262537oia;
Mon, 23 Mar 2015 08:07:19 -0700 (PDT)
X-Received: by 10.194.192.167 with SMTP id hh7mr188222981wjc.151.1427123238580;
Mon, 23 Mar 2015 08:07:18 -0700 (PDT)
Return-Path: <[email protected]>
Received: from jn515.jn-hebergement.com (jn515.jn-hebergement.com. [85.31.196.211])
by mx.google.com with ESMTP id gg10si11912022wib.97.2015.03.23.08.06.53;
Mon, 23 Mar 2015 08:07:18 -0700 (PDT)
Received-SPF: fail (google.com: domain of [email protected] does not designate 85.31.196.211 as permitted sender) client-ip=85.31.196.211;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of [email protected] does not designate 85.31.196.211 as permitted sender) [email protected]
Received: from localhost (localhost [127.0.0.1])
by jn515.jn-hebergement.com (Postfix) with ESMTP id 0183912F7F064;
Mon, 23 Mar 2015 16:06:32 +0100 (CET)
X-Virus-Scanned: amavisd-new at jn515.jn-hebergement.com
Received: from jn515.jn-hebergement.com ([127.0.0.1])
by localhost (jn515.jn-hebergement.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id TEYTaxlF4Drt; Mon, 23 Mar 2015 16:06:31 +0100 (CET)
Received: from jn515.jn-hebergement.com (jn515.jn-hebergement.com [85.31.196.211])
by jn515.jn-hebergement.com (Postfix) with ESMTP id 442E712B16EE8;
Mon, 23 Mar 2015 16:06:31 +0100 (CET)
Date: Mon, 23 Mar 2015 16:06:30 +0100 (CET)
From: Philips Boni <[email protected]>
Reply-To: Philips Boni <[email protected]>
Message-ID: <[email protected]>
Subject: Good day
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [41.216.50.63]
X-Mailer: Zimbra 7.2.0_GA_2669 (ZimbraWebClient - FF3.0 (Win)/7.2.0_GA_2669)
To: undisclosed-recipients:;


attn/Dear,

We got Alert from the Federal Government of Benin to credit your account with $3.8Million from Benin reserve account in Bank of America.In our view research we contacted IMF and US Homeland security about the issue, they confirm it legal in your name,But $68 is required from you for the (UEPAF) in Benin and you are given 48hrs to make the payment direct to American Embassy in Benin with BELOW.After $68 no more fee again:send the fee throw money gram or western union

Receiver:Mark Nwekey
Country:Benin Republic
Amount$68
Question:In God
Answer:We trust

Thanks for banking with Bank of America
Regard Mr.Harry William.(+229-68947167)
Email:[email protected]

ONCE YOU HAVE SENT THE MONEY KINDLY GET BACK TO US WITH THE FOLLOWING,SO THAT WE CAN TRANSFER YOUR FUND IMMEDIATELY INTO YOUR BANK ACCOUNT TODAY:
SENDERS NAME:.......................
MTCN NUMBER........................

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5

Who is online

Users browsing this forum: No registered users and 254 guests