Marks Travel Agency

[watcher007]

yes, please check.. thanks a lot!!


Return-Path: <alex_cole700>
Received: from n71.bullet.mail.sp1.yahoo.com (n71.bullet.mail.sp1.yahoo.com [98.136.44.36])
by mx.google.com with SMTP id b39si7065458rvf.0.2008.10.23.07.28.59;
Thu, 23 Oct 2008 07:28:59 -0700 (PDT)
Received: from [216.252.122.216] by n71.bullet.mail.sp1.yahoo.com with NNFMP;
Received: from [69.147.65.155] by t1.bullet.sp1.yahoo.com with NNFMP; 23 Oct 2008 14:28:59 -0000
Received: from [127.0.0.1] by omp403.mail.sp1.yahoo.com with NNFMP; 23 Oct 2008 14:28:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 32918 invoked by uid 60001); 23 Oct 2008 14:28:59 -0000

[Ralph]

69.147.65.155 United States (Sunnyvale)*


That is the IP of the email providor coming up and not the location of your lad.

Strange thing is I have had the same problem on the 2 previous headers I have been given to check.

Sorry to be a pian but could you take another look at the header.

Below is an instruction guide on headers and what to do with them that I stole from our sister site, I know you know about headers already, but something isn't right and I am hoping that following the guide will work, besides, it will save you having to modify it before checking

How do I find an IP address?

Finding an IP address.

Hotmail
On ther upper right hand side of the screen you'll see "Options". Click on it, then go to "Mail Display Settings". Where it says "Message Headers", change the option to "Advanced". Once that's done, click on "OK" and you'll see the headers of all the emails you get sent.

Hushmail.com
Click on the email you want the header for
Click on the arrow beside "more options" on the right hand side
Click on "show actual message"

Yahoo
Open your email. Scroll to the bottom of it and click on "Full headers". There they are. Nice and simple.

Gmail
Open your email. Look for "More Options" next to the date the email was received. In the new set of options that pop up, look for "Show Original" and click on it. Your email will open up in a new page complete with headers.

Fastmail
On the same line as the subject, to the right of the screen you'll see "Show full header". Click it.

Using an external program to send and receive emails will send your IP address to the scammer as well. Only do this if you have emails already sent to you and you need to retrieve them for posting on the forum. NEVER USE THEM TO BAIT.

Outlook Express
I don't use OE myself, so if someone can confirm the method at http://www.wurd.com/cl_email_msie_headers.php works, please let me know.

Thunderbird
Open your email, hold down the Ctrl key and (while still holding it down) press U. Up pops a window with the headers.

MSN 7.5
Open the Inbox e-mail. Press Alt and Enter together presto there's the info.

Windows Live
Open up your inbox, right click on the email you want to check, then click on "View source".

If you have the new Yahoo, then this is how you check headers. Open the email and, where you see "compact header", left click and it'll give you the option to show the full headers in a window.


What to do with the headers
Now you have them, what do you need to look for? First up, check if The Bat! is there. It's a very sophisticated email program that lets you use multiple email accounts easily. That's why scammers love it so much. It's a legitimate piece of software designed for businesses that the scammers have latched onto. Make a note of the version number and post it in your report. Now, how to find that pesky IP address we keep talking about. Go to

http://headertool.apelord.com/headers

All you need to do with this site is copy the entire header and post it into the box. Be aware that some scammers forge the headers by using proxy servers, so you're not always going to get the result you expected. If that's the case, then try Googling it to see what other results you can find.

WHEN YOU POST THE HEADERS MAKE SURE YOU REMOVE YOUR OWN DETAILS OUT OF IT OR YOU'LL BE TARGETTED BY EVEN MORE SPAMMERS AND SCAMMERS!!

[I smell_a_rat]

This page shows all posters IP addresses. It shows Alex's IP as 82.128.32.98 (Lagos, Nigeria)

Reply #118 Alex Cole (82.128.32.98 ) - Mon Aug 11 03:09:24 2008

[watcher007]

Hi Ralph,

Thanks!

I checked again using the headertool, 3 IP addresses' location is Sunnyvale, USA. The 4th one is Nigeria (Lagos)..It was indicated in the headertool that the last IP listed is usually the originating IP address.

You're right, mr scammer is in Nigeria.. I'm learning a lot from here

[I smell_a_rat]

The latest and last e-mail my friend's friend will be receiving from alex. Payment via Western Union to Justice Powell.

Date: Mon, 27 Oct 2008 05:55:05 -0700
From: [email protected]
Subject: RE: ***AS REGARDS YOUR WORKING VISA APPLICATION TO THE UK***

Hello ,
How are you doing today and how is your family? am very happy to here that you have the half with you now, and as i have told you before i will like you to send the money to the agency as soon as you can,so that they can help you to get you visa and other things you need,and i believe you have the informations you will be sending the money to, if you don't this is the informations they gave me.......

PAYMENT COULD BE MADE BY WESTERN UNION TRANSFER WHEN DEALING INTERNATIONALLY.

BELOW IS THE INFORMATION TO SEND VISA FEES AT ANY WESTERN UNION OUTLET AROUND YOU:

NAME TO SEND MONEY TO: JUSTICE POWELL
OUR COMPANY ADDRESS: PLATFORM 12,
PADDINGTON STATION,
LONDON, W2 1HA,
UNITED KINGDOM.
IN CASE NEEDED:
WESTERN UNION TEXT QUESTION:MONEY FOR WHAT?
WESTERN UNION TEXT ANSWER:PROCUREMENTS
PHONE NUMBER: +447024046811
WEB ADDRESS: www.markstravelagency.synthasite.com

AFTER IT HAD BEEN SENT,DO EMAIL US THE SCANNED WESTERN UNION RECEIPT(PAYMENT RECEIPT) FOR CONFIRMATION SO WE COULD START VISA
PROCUREMENT AS SOON AS POSSIBLE.

I will like you to know that if you want to spend time with you family before coming that is good, but the may things is for you to have the visa and other paper with you and you can get here on time. Have it in mind that you are coming over here to be part of my family and no one can treat you like a slave, all you need is to take care of my kids and you will have a computer in your room to talk to you family at anything you want okay I will be expecting your reply soon. all i have to tell you now is make the payment as soon as you get up from bed okay.tell your family that God will keep all for them.
Have a nice day and God bless.
Mr Alex

--- On Mon, 10/27/08, wrote:

Subject: RE: ***AS REGARDS YOUR WORKING VISA APPLICATION TO THE UK***
To: [email protected]
Date: Monday, October 27, 2008, 8:22 AM


Dear Mr.Cole,

Good day ! .Im sorry for the late reply as I was still trying to check the whole week on fund am I going to use for this job offer.
At any rate ,Im so thankful that you will shoulder the 50% of it .Please tell me the details of how am I going to pay the other half
of the processing fee .Will it be now be directly to Marks Travel Agency ?Please advise so I can email them about my interest.