• Prof.Mark Nnaji <[email protected]>

  • 419 scam database with 50,000+ reports. Verify suspicious inheritance emails, lottery wins, and money transfer requests. Names, emails and bank details exposed.
419 scam database with 50,000+ reports. Verify suspicious inheritance emails, lottery wins, and money transfer requests. Names, emails and bank details exposed.
  Been Targeted by This Scam?

Learn how to report a scam to the FBI, FTC, and the right authorities. Been asked to invest in crypto? Read about pig butchering scams. Received a suspicious check? Learn about fake check scams. Not sure if it's real? Use our free Scam Checker Tool.

  by Faizan Docherty
 
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 208.122.244.10<br>Originating ISP: Juch-tech<br> City: n/a<br>Country of Origin: Satellite Provider<br>* For a complete report on this email header goto ipTRACKERonline
From Ms ROSE RIGHT Sat Nov 16 02:03:07 2013
X-Apparently-To: <snipped> via 72.30.239.32; Sun, 24 Nov 2013 04:40:58 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 85.25.148.15
Received-SPF: none (domain of hotel771.web-server1.com does not designate permitted sender hosts)
X-YMailISG: <snipped>
X-Originating-IP: [85.25.148.15]
Authentication-Results: mta1460.mail.gq1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO hotel771.web-server1.com) (85.25.148.15)
by mta1460.mail.gq1.yahoo.com with SMTP; Sun, 24 Nov 2013 04:40:57 +0000
Received: from sadok by hotel771.web-server1.com with local (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1VhciZ-000eKL-Af
for <snipped>; Sat, 16 Nov 2013 11:03:07 +0100
To: <snipped>
Subject: VERY URGENT AND CONFIDENTIAL
X-PHP-Script: sadok-kouka.com/images/libmail.php for 208.122.244.10
From: Ms ROSE RIGHT <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Sat, 16 Nov 2013 11:03:07 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - hotel771.web-server1.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [546 547] / [47 12]
X-AntiAbuse: Sender Address Domain - hotel771.web-server1.com
X-Get-Message-Sender-Via: hotel771.web-server1.com: authenticated_id: sadok/only user confirmed/virtual account not confirmed
Content-Length: 285
Dear Beneficiary,
Kindly contact Prof.Mark Nnaji at [email protected] for an urgent notification on a grant from the United Nations Organizations. Please it is very important and confidential that you must contact him immediately.
Thanks for your prompt response.
Ms ROSE RIGHT
🔍 Scammer identifiers reported in this thread
  by Faizan Docherty
 
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 208.122.244.10<br>Originating ISP: Juch-tech<br> City: n/a<br>Country of Origin: Satellite Provider<br>* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.220.177.2 with SMTP id bg2csp8857vcb;
Thu, 28 Nov 2013 04:10:49 -0800 (PST)
X-Received: by 10.14.150.5 with SMTP id y5mr325700eej.73.1385640649025;
Thu, 28 Nov 2013 04:10:49 -0800 (PST)
Return-Path: <[email protected]>
Received: from hotel771.web-server1.com (hotel771.startdedicated.com. [85.25.148.15])
by mx.google.com with ESMTPS id s8si33420405eeh.167.2013.11.28.04.10.46
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 28 Nov 2013 04:10:47 -0800 (PST)
Received-SPF: neutral (google.com: 85.25.148.15 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=85.25.148.15;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 85.25.148.15 is neither permitted nor denied by best guess record for domain of [email protected]) smtp.mail=[email protected]
Received: from sadok by hotel771.web-server1.com with local (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1VhcRA-000HPy-SD
for <snipped>; Sat, 16 Nov 2013 10:45:09 +0100
To: <snipped>
Subject: VERY URGENT AND CONFIDENTIAL
X-PHP-Script: sadok-kouka.com/images/libmail.php for 208.122.244.10
From: Ms ROSE RIGHT <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Sat, 16 Nov 2013 10:45:08 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - hotel771.web-server1.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [546 547] / [47 12]
X-AntiAbuse: Sender Address Domain - hotel771.web-server1.com
X-Get-Message-Sender-Via: hotel771.web-server1.com: authenticated_id: sadok/only user confirmed/virtual account not confirmed
Dear Beneficiary,
Kindly contact Prof.Mark Nnaji at [email protected] for an urgent notification on a grant from the United Nations Organizations. Please it is very important and confidential that you must contact him immediately.
Thanks for your prompt response.


Ms ROSE RIGHT